Упорит адуеър или някаква друга зараза

5 януари 20179 г.

Здравейте,

От няколко месеца имам проблем с изскачащи реклами като тези на изображенията, които прикачвам. Опитах да ги изчистя с AVG и други антивирусни, но не помогна. Сложил съм един адблокър ( Fair AdBlocker ) на гугъл хрома и това помага, но е дразнещо да виждам как има постоянно десетки блокирани реклами на някои от новинарските сайтове.

Странното е, че на няколко пъти преинсталирах уиндъуса с форматиране на дяловете и въпреки това нищо не се промени. При първото влизане в интернет се появяват същите реклами.

Spyhunt-а лови следното в регистъра: hkcu\software\conduit\appPath. Изчиствам го, но пак се появява при следващото браузване.

Има ли някакво решение с изчистване, или ще трябва да си стоя с адблокъра?

Благодаря Ви!

5 януари 20179 г.

Автор

Прикачам файловете от сканирането на системата с FRST64.exe

Необходимо ли е да създам нова тема, или тук мога да продължа?

Addition.txt

FRST.txt

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-01-2017
Ran by Ivan (administrator) on IVAN-PC (05-01-2017 18:36:31)
Running from C:\Users\Ivan\Desktop
Loaded Profiles: Ivan (Available Profiles: Ivan)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Български (България)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Enigma Software Group USA, LLC.) C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
(Dell) C:\Users\Ivan\AppData\Local\Apps\2.0\H0L1C4KV.MN9\MDLB6C3Q.1KA\dell..tion_6d0a76327dca4869_0007.000b_df227eeaae3cac0d\DellSystemDetect.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\BibleWorks 10\BW1000.exe
(www.BitComet.com) C:\Program Files\BitComet\BitComet.exe
(www.BitComet.com) C:\Program Files\BitComet\tools\BitCometService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-30] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-12-21] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3477640 2012-09-23] (Adobe Systems Inc.)
HKLM-x32\...\Winlogon: [Shell] C:\Windows\Explorer.exe [ ] () <=== ATTENTION
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [134784 2015-01-31] (Qualcomm®Atheros®)
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2016-11-29] (Disc Soft Ltd)
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\...\Run: [GoogleChromeAutoLaunch_C76D497934B1A0EE0E3BF23C3F10F9A7] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728 2016-12-08] (Google Inc.)
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\...\Run: [DellSystemDetect] => C:\Users\Ivan\AppData\Local\Apps\2.0\H0L1C4KV.MN9\MDLB6C3Q.1KA\dell..tion_6d0a76327dca4869_0007.000b_df227eeaae3cac0d\DellSystemDetect.exe [310728 2016-12-21] (Dell)
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\...\MountPoints2: {0f6103fe-c753-11e6-9def-4cbb583f2f74} - F:\Setup.exe /AutoRun
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\...\MountPoints2: {40e9f038-c765-11e6-960b-4cbb583f2f74} - H:\HiSuiteDownLoader.exe
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\...\MountPoints2: {40e9f049-c765-11e6-960b-4cbb583f2f74} - H:\HiSuiteDownLoader.exe
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\...\MountPoints2: {89d10e76-c74c-11e6-ba84-4cbb583f2f74} - F:\Autoplay.exe -auto
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\...\MountPoints2: {9389adab-cc4c-11e6-b204-4cbb583f2f74} - G:\HiSuiteDownLoader.exe
Startup: C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2016-12-25]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 93.115.85.211 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{FD087434-4936-470D-B886-585CC2F4DEB5}: [DhcpNameServer] 93.115.85.211 8.8.8.8 8.8.4.4

Internet Explorer:
==================
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-05-21] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2014-05-14] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-05-21] (Microsoft Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2016-10-31] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-21] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2014-05-14] (Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-3399940750-3007407254-270903411-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
Handler-x32: lbxfile - {56831180-F115-11d2-B6AA-00104B2B9943} - C:\Program Files (x86)\Libronix DLS\System\FileProt.dll [2006-12-28] (Libronix Corporation)
Handler-x32: lbxres - {24508F1B-9E94-40EE-9759-9AF5795ADF52} - C:\Program Files (x86)\Libronix DLS\System\ResProt.dll [2006-12-28] (Libronix Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-04-01] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2016-12-25] [not signed]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @mozilla.zeniko.ch/PDFlite_Browser_Plugin -> C:\Program Files (x86)\PDFlite\npPdfViewer.dll [2014-02-26] (Simon Bünzli)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-21] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-21] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2014-01-21] (Microsoft Corporation)

Chrome:
=======
CHR HomePage: Default -> hxxps://www.google.bg/webhp?hl=bg&sa=X&ved=0ahUKEwi_v4zfyp7PAhXBJcAKHU5qBtgQPAgD
CHR StartupUrls: Default -> "hxxps://www.google.bg/"
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default [2017-01-05]
CHR Extension: (Google Преводач) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2016-12-21]
CHR Extension: (Google Презентации) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-21]
CHR Extension: (Google Документи) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-21]
CHR Extension: (Dictanote - Speech to text) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aomjekmpappghadlogpigifkghlmebjk [2016-12-21]
CHR Extension: (Google Диск) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-21]
CHR Extension: (YouTube) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-21]
CHR Extension: (Send to Kindle for Google Chrome) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgdjpilhipecahhcilnafpblkieebhea [2016-12-21]
CHR Extension: (Fair AdBlocker App (by STANDS)) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble [2016-12-21]
CHR Extension: (Google Календар) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2016-12-21]
CHR Extension: (Електронни таблици от Google) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-21]
CHR Extension: (Dnevnik.bg) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgpgbimpbapjogkgkgmdkcdimopnnljb [2016-12-21]
CHR Extension: (Google Документи офлайн) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-21]
CHR Extension: (AnyMeeting Screensharing Extension) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjlnkcjifijaeogmofjkladngkaaemec [2016-12-21]
CHR Extension: (VoiceNote II - Speech to text) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfknjgplnkgjihghcidajejfmldhibfm [2016-12-21]
CHR Extension: (Kindle Cloud Reader) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdipabjmbhpdkjaihfjoikhjjeneebd [2016-12-21]
CHR Extension: (Grammarly for Chrome) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2016-12-21]
CHR Extension: (Spell checker and Grammar checker by Ginger) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdfieneakcjfaiglcfcgkidlkmlijjnh [2016-12-21]
CHR Extension: (Google Hangouts) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2016-12-23]
CHR Extension: (Google Play) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2016-12-21]
CHR Extension: (Capital.bg) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lanbncpnnmafpfikemcimkiddbogfnki [2016-12-21]
CHR Extension: (Fair AdBlocker (by STANDS)) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh [2016-12-30]
CHR Extension: (Google Карти) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2016-12-21]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-12-21]
CHR Extension: (Evernote Web Clipper) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2016-12-21]
CHR Extension: (Gmail) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-21]
CHR Extension: (Chrome Media Router) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-21]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2012-09-23]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [323200 2015-01-31] (Windows (R) Win 7 DDK provider) [File not signed]
R3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2016-11-29] (Disc Soft Ltd)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2016-11-25] () [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344184 2016-06-23] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [770432 2014-01-09] (Enigma Software Group USA, LLC.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe [81536 2014-05-13] (Atheros) [File not signed]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2015-01-31] (Qualcomm Atheros)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-12-21] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-12-21] (Disc Soft Ltd)
R3 esgiguard; C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [14872 2014-01-07] ()
S3 EsgScanner; C:\Windows\SysWOW64\DRIVERS\EsgScanner.sys [19984 2012-06-22] ()
S3 ew_usbccgpfilter; C:\Windows\System32\DRIVERS\ew_usbccgpfilter.sys [18816 2016-11-25] (Huawei Technologies Co., Ltd.)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2016-11-25] (Huawei Technologies Co., Ltd.)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-30] (Intel Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
S3 RSPCIESTOR; system32\DRIVERS\RtsPStor.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-05 18:36 - 2017-01-05 18:36 - 00021236 _____ C:\Users\Ivan\Desktop\FRST.txt
2017-01-05 18:36 - 2017-01-05 18:36 - 00000000 ____D C:\FRST
2017-01-05 18:35 - 2017-01-05 18:35 - 02418176 _____ (Farbar) C:\Users\Ivan\Desktop\FRST64.exe
2017-01-05 17:42 - 2017-01-05 17:42 - 00002072 _____ C:\Users\Ivan\Desktop\scan_eset_online.txt
2017-01-05 16:12 - 2017-01-05 16:12 - 00000000 ____D C:\Program Files (x86)\ESET
2017-01-05 14:07 - 2017-01-05 14:07 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2017-01-03 17:04 - 2017-01-03 16:27 - 00284050 ____T C:\Users\Ivan\Documents\Founding-Declaration.pdf
2017-01-03 16:25 - 2017-01-03 16:25 - 00029761 ____T C:\Users\Ivan\Documents\Deklaracia.pdf
2016-12-30 16:38 - 2016-12-30 16:38 - 00264046 _____ C:\Users\Ivan\Desktop\Gmail - Appointment Confirmation.pdf
2016-12-30 11:38 - 2016-12-30 11:38 - 00000000 ____D C:\Users\Ivan\AppData\Local\Diagnostics
2016-12-30 11:00 - 2016-12-30 11:00 - 00061416 _____ C:\Users\Ivan\Desktop\030007a1.jpg
2016-12-30 10:36 - 2016-12-30 10:36 - 00144433 _____ C:\Users\Ivan\Desktop\030007a6.jpg
2016-12-30 10:25 - 2016-12-30 10:25 - 00000991 _____ C:\Users\Public\Desktop\HiSuite.lnk
2016-12-30 10:25 - 2016-12-30 10:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HiSuite
2016-12-30 10:24 - 2016-12-30 10:25 - 00000000 ____D C:\Program Files (x86)\HiSuite
2016-12-30 10:24 - 2016-11-25 08:15 - 00287232 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_quusbnet.sys
2016-12-30 10:24 - 2016-11-25 08:15 - 00223232 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_quusbmdm.sys
2016-12-30 10:24 - 2016-11-25 08:15 - 00126592 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_cdcacm.sys
2016-12-30 10:24 - 2016-11-25 08:15 - 00116864 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_usbdev.sys
2016-12-30 10:24 - 2016-11-25 08:15 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys
2016-12-30 10:24 - 2016-11-25 08:15 - 00018816 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbccgpfilter.sys
2016-12-30 00:49 - 2016-12-30 00:49 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\PDFlite
2016-12-30 00:48 - 2016-12-30 00:48 - 00001859 _____ C:\Users\Public\Desktop\PDFlite.lnk
2016-12-30 00:48 - 2016-12-30 00:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFlite
2016-12-30 00:48 - 2013-08-26 14:12 - 00119152 _____ C:\Windows\system32\redmon.hlp
2016-12-30 00:48 - 2013-08-26 14:12 - 00087040 _____ C:\Windows\system32\redmonnt.dll
2016-12-30 00:48 - 2013-08-26 14:12 - 00046080 _____ C:\Windows\system32\unredmon.exe
2016-12-30 00:47 - 2016-12-30 01:04 - 00000000 ____D C:\Program Files (x86)\OLBPre
2016-12-30 00:47 - 2016-12-30 00:48 - 00000000 ____D C:\Program Files (x86)\PDFlite
2016-12-30 00:47 - 2016-12-30 00:47 - 00001863 _____ C:\Users\Ivan\Desktop\MyPC Backup.lnk
2016-12-29 17:33 - 2016-12-29 17:33 - 00001192 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Libronix Digital Library System.lnk
2016-12-29 17:33 - 2016-12-29 17:33 - 00001092 _____ C:\Users\Public\Desktop\Libronix Digital Library System.lnk
2016-12-29 17:19 - 2016-12-30 21:27 - 00000000 __SHD C:\Config.Msi
2016-12-29 17:02 - 2017-01-04 21:37 - 00000000 ____D C:\Users\Ivan\Documents\Libronix DLS
2016-12-29 16:30 - 2016-12-29 17:02 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Libronix DLS
2016-12-29 16:30 - 2016-12-29 16:30 - 00000000 ____D C:\ProgramData\Libronix DLS
2016-12-29 16:29 - 2016-12-29 17:28 - 00000000 ____D C:\Program Files (x86)\Libronix DLS
2016-12-27 19:53 - 2016-12-27 19:53 - 00009796 _____ C:\spyhunter.log
2016-12-27 17:53 - 2016-12-27 17:54 - 00008189 _____ C:\sh4_service.log
2016-12-27 17:44 - 2013-10-18 15:01 - 00285747 _____ C:\shldr
2016-12-27 17:44 - 2013-10-18 15:01 - 00008192 _____ C:\shldr.mbr
2016-12-25 15:21 - 2016-12-25 15:21 - 00000000 ____H C:\Users\Ivan\Documents\Default.rdp
2016-12-25 15:21 - 2016-12-25 15:21 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Macromedia
2016-12-25 15:21 - 2016-12-25 15:21 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\com.adobe.formscentral.FormsCentralForAcrobat
2016-12-25 11:44 - 2016-12-25 11:44 - 00002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat XI Pro.lnk
2016-12-25 11:44 - 2016-12-25 11:44 - 00002210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe FormsCentral.lnk
2016-12-25 11:44 - 2016-12-25 11:44 - 00002140 _____ C:\Users\Public\Desktop\Adobe FormsCentral.lnk
2016-12-25 11:44 - 2016-12-25 11:44 - 00002049 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller XI.lnk
2016-12-25 11:44 - 2016-12-25 11:44 - 00002026 _____ C:\Users\Public\Desktop\Adobe Acrobat XI Pro.lnk
2016-12-25 11:40 - 2016-12-25 11:40 - 00000000 ____D C:\Windows\system32\appmgmt
2016-12-25 11:26 - 2016-12-25 11:45 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-12-25 11:22 - 2016-12-27 17:54 - 00000000 ____D C:\Users\Ivan\AppData\Local\Adobe
2016-12-25 11:22 - 2016-12-25 15:21 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Adobe
2016-12-25 11:20 - 2016-12-25 11:43 - 00000000 ____D C:\ProgramData\Adobe
2016-12-25 11:20 - 2016-12-25 11:42 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-12-25 10:29 - 2016-12-27 17:36 - 00000000 ____D C:\Users\Ivan\Evernote
2016-12-25 10:29 - 2016-12-25 10:29 - 00000932 _____ C:\Users\Ivan\Desktop\Evernote.lnk
2016-12-25 10:29 - 2016-12-25 10:29 - 00000000 ____D C:\Users\Ivan\AppData\LocalLow\Evernote
2016-12-25 10:29 - 2016-12-25 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2016-12-25 10:29 - 2016-12-25 10:29 - 00000000 ____D C:\Program Files (x86)\Evernote
2016-12-24 18:36 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-12-24 18:36 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-12-24 18:36 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-12-24 18:36 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-12-24 18:36 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-12-24 18:36 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-12-24 18:36 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-12-24 18:36 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-12-24 18:36 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-12-24 18:36 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-12-24 18:35 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-12-24 18:35 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-12-24 18:35 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-12-24 18:35 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-12-24 18:33 - 2016-12-24 18:33 - 00001128 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player FREE.lnk
2016-12-24 18:33 - 2016-12-24 18:33 - 00001122 _____ C:\Users\Public\Desktop\BS.Player FREE.lnk
2016-12-24 18:33 - 2016-12-24 18:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BS.Player
2016-12-24 18:32 - 2016-12-25 22:40 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\BSplayer
2016-12-24 18:32 - 2016-12-24 18:32 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\BSplayer Pro
2016-12-24 18:32 - 2016-12-24 18:32 - 00000000 ____D C:\Program Files (x86)\Webteh
2016-12-24 16:19 - 2016-12-24 16:19 - 00002456 _____ C:\Users\Ivan\Documents\Register Vegas Pro.htm
2016-12-24 16:19 - 2016-12-24 16:19 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Publish Providers
2016-12-24 16:14 - 2016-12-24 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2016-12-24 16:13 - 2017-01-05 14:21 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{a5b3df42-c9e1-11e6-9c32-4cbb583f2f74}.TMContainer00000000000000000001.regtrans-ms
2016-12-24 16:13 - 2017-01-05 14:21 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{a5b3df42-c9e1-11e6-9c32-4cbb583f2f74}.TM.blf
2016-12-24 16:13 - 2016-12-24 16:23 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{a5b3df42-c9e1-11e6-9c32-4cbb583f2f74}.TMContainer00000000000000000002.regtrans-ms
2016-12-24 16:13 - 2016-12-24 16:17 - 00000000 ____D C:\Users\Ivan\AppData\Local\Sony
2016-12-24 16:13 - 2016-12-24 16:13 - 00000000 ____D C:\ProgramData\Sony
2016-12-24 16:13 - 2016-12-24 16:13 - 00000000 ____D C:\Program Files\Sony
2016-12-24 16:13 - 2016-12-24 16:13 - 00000000 ____D C:\Program Files (x86)\Sony
2016-12-24 16:11 - 2016-12-24 16:39 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Sony
2016-12-24 15:41 - 2016-12-24 15:41 - 00000000 ____D C:\Windows\SysWOW64\sda
2016-12-24 15:37 - 2016-12-24 15:37 - 01048576 ___SH C:\Windows\system32\config\COMPONENTS{016888b8-6c6f-11de-8d1d-001e0bcde3ec}.TxR.2.regtrans-ms
2016-12-24 15:37 - 2016-12-24 15:37 - 01048576 ___SH C:\Windows\system32\config\COMPONENTS{016888b8-6c6f-11de-8d1d-001e0bcde3ec}.TxR.1.regtrans-ms
2016-12-24 15:37 - 2016-12-24 15:37 - 01048576 ___SH C:\Windows\system32\config\COMPONENTS{016888b8-6c6f-11de-8d1d-001e0bcde3ec}.TxR.0.regtrans-ms
2016-12-24 15:37 - 2016-12-24 15:37 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{016888b8-6c6f-11de-8d1d-001e0bcde3ec}.TxR.blf
2016-12-24 15:37 - 2013-11-01 23:40 - 00330456 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsUVStor.sys
2016-12-24 15:37 - 2013-04-26 02:12 - 09889352 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsUVStoricon.dll
2016-12-24 15:23 - 2017-01-05 14:06 - 00000356 _____ C:\Windows\Tasks\DriverToolkit Autorun.job
2016-12-24 15:23 - 2016-12-27 18:11 - 00002708 _____ C:\Windows\System32\Tasks\DriverToolkit Autorun
2016-12-24 15:15 - 2016-12-24 15:15 - 00000000 ____D C:\Users\Ivan\AppData\Local\Programs
2016-12-24 15:15 - 2016-12-24 15:15 - 00000000 ____D C:\Users\Ivan\AppData\Local\DriverToolkit
2016-12-24 15:11 - 2016-12-24 15:37 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-12-24 15:11 - 2016-12-24 15:11 - 00000000 ____D C:\DRIVERS
2016-12-24 07:58 - 2017-01-01 18:59 - 00000000 ____D C:\Users\Ivan\AppData\Local\CrashDumps
2016-12-24 07:50 - 2016-12-24 07:50 - 00000000 ____D C:\Users\Ivan\Documents\Шаблони на Office по избор
2016-12-24 07:43 - 2016-12-24 07:43 - 00000000 ____D C:\Users\Ivan\AppData\Local\calibre-cache
2016-12-24 07:42 - 2016-12-25 11:16 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\calibre
2016-12-24 07:41 - 2016-12-24 07:41 - 00000960 _____ C:\Users\Public\Desktop\calibre - E-book management.lnk
2016-12-24 07:41 - 2016-12-24 07:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2016-12-24 07:41 - 2016-12-24 07:41 - 00000000 ____D C:\Program Files (x86)\Calibre2
2016-12-23 12:50 - 2016-12-23 12:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IP Camera Adapter
2016-12-23 12:50 - 2016-12-23 12:50 - 00000000 ____D C:\Program Files (x86)\IP Camera Adapter
2016-12-23 12:03 - 2016-12-23 12:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2016-12-23 12:03 - 2016-12-23 12:03 - 00000000 ____D C:\Users\Ivan\.android
2016-12-23 11:58 - 2016-12-23 11:58 - 00000000 ____D C:\Users\Ivan\Documents\HiSuite
2016-12-23 11:57 - 2016-12-30 10:25 - 00000000 ____D C:\Users\Ivan\AppData\Local\Hisuite
2016-12-23 11:57 - 2016-11-25 08:15 - 02152176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFUpdate_01009.dll
2016-12-23 11:57 - 2016-11-25 08:15 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01009.dll
2016-12-23 11:57 - 2016-11-25 08:15 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winusbcoinstaller2.dll
2016-12-23 11:55 - 2016-12-23 11:55 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2016-12-22 15:58 - 2016-12-22 15:58 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-12-22 14:34 - 2016-12-22 14:34 - 00001914 _____ C:\Users\Public\Desktop\BibleWorks 10.lnk
2016-12-22 14:34 - 2000-10-31 02:11 - 00098304 _____ (TechSmith Corporation) C:\Windows\SysWOW64\tsccvid.dll
2016-12-22 14:33 - 2016-12-22 14:33 - 00000000 ____D C:\Users\Ivan\Documents\BibleWorks
2016-12-22 14:33 - 2016-12-22 14:33 - 00000000 ____D C:\Users\Ivan\AppData\Local\BibleWorks
2016-12-22 14:33 - 2016-12-22 14:33 - 00000000 ____D C:\ProgramData\BibleWorks
2016-12-22 14:33 - 2015-11-16 17:42 - 02881024 _____ C:\Windows\SysWOW64\bwinstall.dll
2016-12-22 14:33 - 2015-09-16 14:35 - 00147456 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\HRS32.DLL
2016-12-22 14:33 - 2015-09-16 14:29 - 00614400 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\HTS18.DLL
2016-12-22 14:33 - 2015-09-15 14:23 - 01974272 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\TER23.DLL
2016-12-22 14:33 - 2015-03-22 15:44 - 22962688 _____ C:\Windows\SysWOW64\bwbits10.dll
2016-12-22 14:33 - 2015-02-17 16:30 - 00610304 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\HTS17.DLL
2016-12-22 14:33 - 2015-02-16 18:14 - 01937408 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\TER22.DLL
2016-12-22 14:33 - 2014-07-31 16:52 - 01843200 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\ter20.dll
2016-12-22 14:33 - 2014-07-31 16:52 - 00593920 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\hts15.dll
2016-12-22 14:33 - 2013-11-08 09:49 - 00647680 _____ C:\Windows\SysWOW64\sqlite3.dll
2016-12-22 14:33 - 2011-02-07 17:41 - 00304640 _____ (MicroQuill Software Publishing, Inc.) C:\Windows\SysWOW64\SHW32d.DLL
2016-12-22 14:33 - 2010-08-31 13:08 - 01560576 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\TER17.DLL
2016-12-22 14:33 - 2010-08-31 13:08 - 00577573 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\HTS12.DLL
2016-12-22 14:33 - 2010-08-31 13:08 - 00267728 _____ (Wintertree Software Inc.) C:\Windows\SysWOW64\ssce5532.dll
2016-12-22 14:33 - 2009-04-20 03:00 - 00139264 _____ (Info-ZIP) C:\Windows\SysWOW64\unzip32.dll
2016-12-22 14:33 - 2007-01-25 03:03 - 00058280 _____ C:\Windows\SysWOW64\bwnthook.dll
2016-12-22 14:33 - 2007-01-25 03:02 - 00058280 _____ C:\Windows\SysWOW64\bwntsend.dll
2016-12-22 14:33 - 2005-08-06 08:45 - 00055808 _____ C:\Windows\SysWOW64\zlib1.dll
2016-12-22 14:33 - 2003-09-17 12:43 - 00081920 _____ C:\Windows\SysWOW64\bwplay.exe
2016-12-22 14:33 - 2000-03-14 05:21 - 00181760 _____ C:\Windows\SysWOW64\patchw32.dll
2016-12-22 14:33 - 1997-12-05 12:33 - 00116736 _____ C:\Windows\SysWOW64\patchw.dll
2016-12-22 14:22 - 2017-01-05 17:19 - 00000000 ____D C:\Program Files (x86)\BibleWorks 10
2016-12-22 14:22 - 2016-12-22 14:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BibleWorks 10
2016-12-22 09:39 - 2016-12-25 11:26 - 00000000 ____D C:\Users\Ivan\AppData\LocalLow\Adobe
2016-12-21 14:53 - 2016-12-21 14:53 - 03370683 _____ C:\Users\Ivan\Desktop\Topics.pdf
2016-12-21 11:50 - 2016-12-21 11:50 - 00003332 _____ C:\Windows\System32\Tasks\SpyHunter4Startup
2016-12-21 11:50 - 2016-12-21 11:50 - 00002282 _____ C:\Users\Ivan\Desktop\SpyHunter.lnk
2016-12-21 11:50 - 2016-12-21 11:50 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2016-12-21 11:50 - 2016-12-21 11:50 - 00000000 ____D C:\sh4ldr
2016-12-21 11:50 - 2016-12-21 11:50 - 00000000 ____D C:\Program Files (x86)\Enigma Software Group
2016-12-21 11:50 - 2016-12-21 11:50 - 00000000 _____ C:\autoexec.bat
2016-12-21 11:49 - 2016-12-21 11:50 - 00000000 ____D C:\Windows\AF54923662584AC6A0435B5B89C6EB61.TMP
2016-12-21 10:14 - 2016-12-21 10:14 - 00003053 _____ C:\Users\Ivan\Desktop\SharpKeys.lnk
2016-12-21 10:14 - 2016-12-21 10:14 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RandyRants.com
2016-12-21 10:14 - 2016-12-21 10:14 - 00000000 ____D C:\Program Files (x86)\RandyRants.com
2016-12-21 10:13 - 2016-12-21 10:13 - 00486400 _____ C:\Users\Ivan\Downloads\Непотвърдено 701865.crdownload
2016-12-21 10:13 - 2016-12-21 10:13 - 00486400 _____ C:\Users\Ivan\Downloads\Непотвърдено 568051.crdownload
2016-12-21 10:12 - 2016-12-21 10:12 - 00486400 _____ C:\Users\Ivan\Downloads\Непотвърдено 131414.crdownload
2016-12-21 10:00 - 2016-12-21 10:00 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\WinRAR
2016-12-21 09:59 - 2016-12-27 19:53 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Q72b3mECjZq12zf0
2016-12-21 09:59 - 2016-12-21 09:59 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Imminent
2016-12-21 09:55 - 2016-12-21 09:55 - 00000000 _RSHD C:\Windows Activation Technologies
2016-12-21 09:54 - 2012-10-07 14:33 - 00001429 _____ C:\Users\Ivan\Desktop\KJ_Starter.lnk
2016-12-21 09:54 - 2012-10-07 14:33 - 00001429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KJ_Starter.lnk
2016-12-21 09:54 - 2012-10-06 00:07 - 00405881 _____ C:\Windows\KJ.exe
2016-12-21 09:53 - 2016-12-21 10:05 - 00000000 ____D C:\Windows\KJ
2016-12-21 09:51 - 2017-01-05 18:16 - 00000000 ____D C:\Downloads
2016-12-21 09:50 - 2017-01-05 18:35 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\BitComet
2016-12-21 09:50 - 2016-12-21 09:50 - 00000812 _____ C:\Users\Public\Desktop\BitComet.lnk
2016-12-21 09:50 - 2016-12-21 09:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)
2016-12-21 09:50 - 2016-12-21 09:50 - 00000000 ____D C:\Program Files\BitComet
2016-12-21 09:49 - 2016-12-21 09:49 - 16316000 _____ C:\Users\Ivan\Downloads\BitComet_1.44_setup (1).exe
2016-12-21 09:48 - 2016-12-21 09:48 - 16316000 _____ C:\Users\Ivan\Downloads\BitComet_1.44_setup.exe
2016-12-21 09:27 - 2016-12-21 09:27 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-12-21 09:26 - 2016-12-21 11:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-12-21 09:26 - 2016-12-21 09:26 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\Windows\PCHEALTH
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files\Microsoft.NET
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2016-12-21 09:23 - 2016-12-21 11:36 - 00000000 ____D C:\ProgramData\Microsoft Help
2016-12-21 09:23 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files\Microsoft Office
2016-12-21 09:23 - 2016-12-21 09:23 - 00000000 ____D C:\Users\Ivan\AppData\Local\Microsoft Help
2016-12-21 09:23 - 2016-12-21 09:23 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2016-12-21 09:23 - 2016-12-21 09:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-12-21 09:23 - 2016-12-21 09:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2016-12-21 09:22 - 2016-12-21 09:22 - 00000000 __RHD C:\MSOCache
2016-12-21 09:21 - 2016-12-21 09:21 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-12-21 09:21 - 2016-12-21 09:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-12-21 09:21 - 2016-12-21 09:21 - 00000000 ____D C:\Program Files (x86)\WinRAR
2016-12-21 09:20 - 2016-12-21 09:20 - 01972424 _____ C:\Users\Ivan\Downloads\wrar540.exe
2016-12-21 09:17 - 2016-12-21 09:17 - 00000000 ____D C:\Users\Ivan\AppData\Local\Disc_Soft_Ltd
2016-12-21 09:15 - 2016-12-21 09:15 - 00000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2016-12-21 09:13 - 2016-12-21 09:18 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\DAEMON Tools Lite
2016-12-21 09:13 - 2016-12-21 09:14 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2016-12-21 09:13 - 2016-12-21 09:13 - 00047672 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtliteusbbus.sys
2016-12-21 09:13 - 2016-12-21 09:13 - 00030264 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2016-12-21 09:13 - 2016-12-21 09:13 - 00001773 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2016-12-21 09:13 - 2016-12-21 09:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2016-12-21 09:13 - 2016-12-21 09:13 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2016-12-21 08:45 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files (x86)\Microsoft.NET
2016-12-21 08:43 - 2016-12-21 08:43 - 00692072 _____ (Disc Soft Ltd.) C:\Users\Ivan\Downloads\DTLiteInstaller.exe
2016-12-21 08:28 - 2016-12-21 08:28 - 00000118 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-12-21 08:27 - 2017-01-05 14:07 - 00000000 __SHD C:\Users\Ivan\IntelGraphicsProfiles
2016-12-21 08:27 - 2016-12-21 08:27 - 00015778 _____ C:\Windows\system32\results.xml
2016-12-21 08:26 - 2016-12-21 08:26 - 00000401 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-12-21 08:24 - 2016-12-21 08:24 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2016-12-21 08:24 - 2013-12-21 00:38 - 00041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll
2016-12-21 08:24 - 2013-12-10 15:27 - 00016344 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll
2016-12-21 08:23 - 2016-12-21 08:23 - 00000000 ____H C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
2016-12-21 08:23 - 2016-12-21 08:23 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2016-12-21 08:23 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2016-12-21 08:23 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2016-12-21 08:23 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2016-12-21 08:23 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2016-12-21 08:22 - 2016-12-21 08:46 - 00751640 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-12-21 08:22 - 2016-12-21 08:24 - 00000000 ____D C:\ProgramData\Intel
2016-12-21 08:22 - 2016-12-21 08:22 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-12-21 08:22 - 2016-12-21 08:22 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Intel Corporation
2016-12-21 08:21 - 2016-12-21 08:24 - 00000000 ____D C:\Program Files\Intel
2016-12-21 08:21 - 2016-12-21 08:24 - 00000000 ____D C:\Program Files (x86)\Intel
2016-12-21 08:21 - 2016-12-21 08:21 - 00000700 _____ C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk
2016-12-21 08:21 - 2016-06-23 08:53 - 00095232 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL
2016-12-21 08:21 - 2016-06-23 08:53 - 00091128 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2016-12-21 08:20 - 2016-12-21 08:27 - 00000000 ____D C:\Intel
2016-12-21 08:18 - 2016-12-21 08:18 - 00000000 ____D C:\Users\Ivan\Documents\Dell Downloads
2016-12-21 08:17 - 2016-12-21 08:17 - 00013560 _____ C:\Users\Ivan\Downloads\DellSystemDetectLauncher.Application
2016-12-21 08:17 - 2016-12-21 08:17 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
2016-12-21 08:15 - 2016-12-21 08:15 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Приложения в Chrome
2016-12-21 08:14 - 2016-12-21 08:14 - 00002265 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-21 08:14 - 2016-12-21 08:14 - 00002253 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-21 08:13 - 2016-12-30 00:48 - 00142672 _____ C:\Users\Ivan\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-21 08:13 - 2016-12-23 12:07 - 00000000 ____D C:\Users\Ivan\AppData\Local\Deployment
2016-12-21 08:13 - 2016-12-21 08:22 - 00000000 ____D C:\Users\Ivan\AppData\Local\Google
2016-12-21 08:13 - 2016-12-21 08:20 - 00003430 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-21 08:13 - 2016-12-21 08:20 - 00003302 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-21 08:13 - 2016-12-21 08:14 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-21 08:13 - 2016-12-21 08:13 - 00000000 ____D C:\Users\Ivan\AppData\Local\Apps\2.0
2016-12-21 08:13 - 2016-12-21 08:13 - 00000000 ____D C:\Users\Ivan\AppData\Local\Apps
2016-12-21 08:11 - 2016-12-21 08:12 - 00000000 ____D C:\Users\Ivan\AppData\LocalLow\Microsoft
2016-12-21 08:11 - 2016-12-21 08:11 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Atheros
2016-12-21 08:11 - 2016-12-21 08:11 - 00000000 ____D C:\Users\Ivan\AppData\Local\BMExplorer
2016-12-21 08:11 - 2016-12-21 08:11 - 00000000 ____D C:\ProgramData\Atheros
2016-12-21 08:10 - 2017-01-04 23:07 - 02288481 ____H C:\Users\Ivan\AppData\Local\IconCache.db
2016-12-21 08:10 - 2016-12-21 08:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HotSpot
2016-12-21 08:10 - 2016-12-21 08:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atheros Smart Net
2016-12-21 08:09 - 2016-12-21 08:09 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_btath_hcrp_01009.Wdf
2016-12-21 08:08 - 2016-12-28 16:35 - 00000000 ____D C:\Users\Ivan\Documents\Bluetooth Folder
2016-12-21 08:07 - 2016-12-21 08:08 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program
2016-12-21 08:07 - 2016-12-21 08:08 - 00000000 ____D C:\Program Files\Common Files\QCA_Bluetooth
2016-12-21 08:07 - 2016-12-21 08:07 - 00000000 ____D C:\ProgramData\{46B78963-E124-47B8-9C79-11FDD89852E5}
2016-12-21 08:06 - 2016-12-29 17:36 - 00000000 __SHD C:\Windows\Installer
2016-12-21 08:06 - 2016-12-24 15:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-21 08:06 - 2016-12-21 08:10 - 00000000 ____D C:\Program Files (x86)\Dell Wireless
2016-12-21 08:06 - 2016-12-21 08:06 - 00000000 ____D C:\Windows\system32\nn-NO
2016-12-21 08:06 - 2016-12-21 08:06 - 00000000 ____D C:\Windows\Options
2016-12-21 08:06 - 2016-12-21 08:06 - 00000000 ____D C:\Program Files (x86)\Cisco
2016-12-21 08:06 - 2015-02-02 00:21 - 00031345 ____N C:\Windows\system32\netathrx.inf
2016-12-21 08:06 - 2015-02-02 00:21 - 00027074 ____N C:\Windows\system32\athwbx.inf
2016-12-21 08:06 - 2015-02-02 00:21 - 00011400 ____N C:\Windows\system32\athwbx.cat
2016-12-21 08:06 - 2015-02-02 00:21 - 00009662 ____N C:\Windows\system32\athrextx.cat
2016-12-21 08:06 - 2015-01-11 19:19 - 04134912 ____N (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\athrx.sys
2016-12-21 08:06 - 2015-01-11 19:19 - 04134912 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys
2016-12-21 08:06 - 2015-01-11 19:07 - 04267008 ____N (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\athwbx.sys
2016-12-21 08:06 - 2014-05-13 20:07 - 00060416 ____N (Atheros) C:\Windows\system32\athihvui.dll
2016-12-21 08:06 - 2014-05-13 20:06 - 00440320 ____N (Atheros) C:\Windows\system32\athihvs.dll
2016-12-21 08:05 - 2016-12-21 08:06 - 00000000 ____D C:\ProgramData\Dell
2016-12-21 08:03 - 2017-01-05 18:36 - 01835008 ___SH C:\Users\Ivan\NTUSER.DAT
2016-12-21 08:03 - 2017-01-05 18:36 - 00262144 ___SH C:\Users\Ivan\ntuser.dat.LOG1
2016-12-21 08:03 - 2017-01-05 18:36 - 00000000 ___RD C:\Users\Ivan\Desktop
2016-12-21 08:03 - 2017-01-05 18:36 - 00000000 ____D C:\Users\Ivan\AppData\Local\Temp
2016-12-21 08:03 - 2017-01-05 18:35 - 00000000 ___RD C:\Users\Ivan\Downloads
2016-12-21 08:03 - 2017-01-05 14:09 - 00000000 ____D C:\Users\Ivan\AppData\Local
2016-12-21 08:03 - 2017-01-05 14:07 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-21 08:03 - 2017-01-03 17:04 - 00000000 ___RD C:\Users\Ivan\Documents
2016-12-21 08:03 - 2017-01-02 13:02 - 00000000 ___SD C:\Users\Ivan\AppData\Roaming\Microsoft
2016-12-21 08:03 - 2016-12-30 11:37 - 00000000 ____D C:\Users\Ivan\AppData\Local\Microsoft
2016-12-21 08:03 - 2016-12-30 01:21 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2016-12-21 08:03 - 2016-12-30 00:49 - 00000000 ____D C:\Users\Ivan\AppData\Roaming
2016-12-21 08:03 - 2016-12-25 10:29 - 00000000 ____D C:\Users\Ivan\AppData\LocalLow
2016-12-21 08:03 - 2016-12-25 10:29 - 00000000 ____D C:\Users\Ivan
2016-12-21 08:03 - 2016-12-21 08:10 - 00524288 ___SH C:\Users\Ivan\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
2016-12-21 08:03 - 2016-12-21 08:10 - 00524288 ___SH C:\Users\Ivan\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
2016-12-21 08:03 - 2016-12-21 08:10 - 00065536 ___SH C:\Users\Ivan\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
2016-12-21 08:03 - 2016-12-21 08:03 - 00001427 _____ C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-12-21 08:03 - 2016-12-21 08:03 - 00001393 _____ C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-12-21 08:03 - 2016-12-21 08:03 - 00000476 ___SH C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000402 ___SH C:\Users\Ivan\Documents\desktop.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000282 ___SH C:\Users\Ivan\Downloads\desktop.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000282 ___SH C:\Users\Ivan\Desktop\desktop.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000174 ___SH C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000020 ___SH C:\Users\Ivan\ntuser.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 __SHD C:\Recovery
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___SH C:\Users\Ivan\ntuser.dat.LOG2
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Videos
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Searches
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Saved Games
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Pictures
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Music
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Links
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Favorites
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Contacts
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___HD C:\Users\Ivan\AppData
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Identities
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ____D C:\Users\Ivan\AppData\Local\VirtualStore
2016-12-21 08:03 - 2011-04-12 10:34 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Media Center Programs
2016-12-21 08:03 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-21 08:03 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-21 08:01 - 2016-12-21 08:01 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-12-21 08:00 - 2017-01-05 14:11 - 00468704 _____ C:\Windows\WindowsUpdate.log
2016-12-21 08:00 - 2016-12-24 15:25 - 00000000 ____D C:\Windows\SoftwareDistribution
2016-12-21 08:00 - 2016-12-21 08:00 - 00001355 _____ C:\Windows\TSSysprep.log
2016-12-21 08:00 - 2016-12-21 08:00 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-12-21 07:59 - 2016-12-21 07:59 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-12-21 07:58 - 2016-12-21 14:55 - 00000000 ____D C:\Windows\Prefetch
2016-12-21 07:57 - 2017-01-05 14:05 - 4194332672 ___SH C:\pagefile.sys
2016-12-21 07:57 - 2016-12-30 13:51 - 00000000 __SHD C:\System Volume Information
2016-12-21 07:57 - 2016-12-21 08:03 - 00000000 ____D C:\Windows\Panther

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-05 18:09 - 2009-07-14 06:45 - 00025936 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-05 18:09 - 2009-07-14 06:45 - 00025936 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-05 14:12 - 2009-07-14 07:13 - 00787118 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-05 14:12 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-01-05 14:06 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-30 21:31 - 2009-07-14 06:45 - 00507696 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-30 21:27 - 2010-11-21 05:47 - 00014484 _____ C:\Windows\PFRO.log
2016-12-30 11:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-12-30 10:25 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Desktop
2016-12-30 10:25 - 2009-07-14 05:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs
2016-12-30 10:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\DriverStore
2016-12-30 10:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\drivers
2016-12-30 10:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\catroot
2016-12-30 01:04 - 2009-07-14 05:20 - 00000000 ___RD C:\Program Files
2016-12-30 01:04 - 2009-07-14 05:20 - 00000000 ___HD C:\ProgramData
2016-12-30 01:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Tasks
2016-12-30 00:58 - 2009-07-14 04:34 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
2016-12-29 16:33 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\catroot2
2016-12-29 16:32 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Fonts
2016-12-29 16:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\winsxs
2016-12-29 16:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64
2016-12-27 17:54 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2016-12-27 17:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\bg-BG
2016-12-27 17:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\bg-BG
2016-12-25 11:20 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files (x86)\Common Files
2016-12-24 16:14 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\assembly
2016-12-24 16:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Microsoft.NET
2016-12-24 15:36 - 2009-07-14 06:54 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{016888b9-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
2016-12-24 15:36 - 2009-07-14 06:54 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{016888b9-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
2016-12-24 15:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Tasks
2016-12-24 15:08 - 2009-07-14 05:20 - 00000000 ___SD C:\ProgramData\Microsoft
2016-12-23 11:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Drivers\UMDF
2016-12-21 13:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\wdi
2016-12-21 11:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\drivers
2016-12-21 10:03 - 2011-04-12 10:34 - 00000000 ____D C:\Windows\ShellNew
2016-12-21 10:03 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2016-12-21 09:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-12-21 09:26 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-12-21 09:26 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files
2016-12-21 09:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\Tasks\Microsoft
2016-12-21 09:24 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2016-12-21 09:15 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Public\Documents
2016-12-21 08:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\en-US
2016-12-21 08:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\en-US
2016-12-21 08:25 - 2011-04-12 10:24 - 00000000 ____D C:\Windows\system32\Drivers\en-US
2016-12-21 08:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\wbem
2016-12-21 08:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Logs
2016-12-21 08:22 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2016-12-21 08:21 - 2009-07-14 06:54 - 00000404 ___SH C:\Users\Public\Desktop\desktop.ini
2016-12-21 08:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\LogFiles
2016-12-21 08:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\CodeIntegrity
2016-12-21 08:08 - 2009-07-14 05:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-TW
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-CN
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sv-SE
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ru-RU
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\pt-PT
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\pl-PL
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\nl-NL
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ko-KR
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ja-JP
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\it-IT
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\hu-HU
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\fr-FR
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\fi-FI
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\es-ES
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\el-GR
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\de-DE
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\da-DK
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\cs-CZ
2016-12-21 08:03 - 2009-07-14 05:20 - 00000000 ___RD C:\Users
2016-12-21 08:03 - 2009-07-14 05:18 - 00000000 __SHD C:\$Recycle.Bin
2016-12-21 08:02 - 2009-07-14 06:45 - 00000000 ____D C:\Windows\debug
2016-12-21 08:01 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-12-21 08:01 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-21 08:01 - 2009-07-14 07:01 - 00281759 _____ C:\Windows\SysWOW64\license.rtf
2016-12-21 08:01 - 2009-07-14 07:01 - 00281759 _____ C:\Windows\system32\license.rtf
2016-12-21 08:01 - 2009-07-14 06:54 - 00000964 ___SH C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-21 08:00 - 2009-07-14 06:46 - 00002790 _____ C:\Windows\DtcInstall.log
2016-12-21 08:00 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2016-12-21 08:00 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\config\TxR
2016-12-21 07:58 - 2011-04-12 10:34 - 00000000 ____D C:\Windows\CSC
2016-12-21 07:57 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2016-12-21 07:57 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-12-21 07:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\config\RegBack
2016-12-21 07:57 - 2009-07-14 04:34 - 00189440 ____H C:\Users\Default\NTUSER.DAT.LOG1
2016-12-21 07:56 - 2009-07-14 04:34 - 00262144 ___SH C:\Users\Default\NTUSER.DAT

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe
[2010-11-21 05:24] - [2011-01-16 02:01] - 0389632 ____A (Microsoft Corporation) 81257415084B84F3C0D95C381A8D4C8F

C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll
[2010-11-21 05:24] - [2011-01-16 02:01] - 1008640 ____A (Microsoft Corporation) 0B864E15A0BADFF0E7BB8B59009FDDCF

C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-12-21 07:57

==================== End of FRST.txt ============================

Редактирано 5 януари 20179 г. от Ivan Mirchev Nikolov (преглед на промените)

5 януари 20179 г.

Стъпка 1

Деинсталирайте от контролния панел следния софтуер:

Цитат

SpyHunter

DriverToolkit

Стъпка 2

Прикачете следните файлове за анализ във https://www.virustotal.com/en . Ако файла е анализиран вече, натиснете бутона Reanalyse. Копирайте линка от анализа и го поставете тук.

Цитат

C:\Windows\KJ.exe

Забележка: Файлът може да се скрит!

Стъпка 3

Изтеглете файла fixlist и го запазете на вашия десктоп.

Стартирайте FRST.exe и натиснете бутона FIX веднъж!
Почистването ще започне, не използвайте системата!
След като приключи, ако ви поиска рестартиране, съгласете се.
След като зареди системата публикувайте лог файла с име fixlog.txt, който се намира на десктопа Ви.

Забележка: Текущия фикс да не се използва на други системи!

Стъпка 4

Изтеглете: ADWCleaner.

Затворете всички браузъри и стартирайте AdwCleaner.exe.
Натиснете бутона SCAN.
След като приключи проверката натиснете бутона CLEAN.
Програмата ще затвори излишния софтуер и ще започне почистването.
След като приключи почистването ADWCleaner ще поиска рестарт. Съгласете се.
След зареждането на системата отидете до: C:\AdwCleaner и потърсете лог файл с името AdwCleaner[C0].txt.
Публикувайте съдържанието на "AdwCleaner[C0]" в следващия Ви коментар.

Стъпка 5

Изтеглете: JRT.

Запазете файла на вашия десктоп.
Затворете всички браузъри.
Стартирайте JRT.exe.
След като се появи съобщението "Press any key to continue . . .". Натиснете което и да е копче от клавиатурата.
Програмата ще започне почистването. Не прекъсвайте работата и, и не използвайте системата докато протича почистването.
След като приключи почистването ще се отвори лог файл, който се намира на десктопа с име JRT.txt.
Копирайте съдържанието му и го поставете към следващия Ви коментар.

Стъпка 6

Изтеглете: Malwarebytes Anti-Malware.
Стартирайте инсталационния файл и следвайте съветника за инсталация.
Преди края на инсталацията премахнете отметката от: "Enable free trial of Malwarebytes Anti-Malware Premium" и се уверете че има отметка пред "Launch Malwarebytes Anti-Malware".
Отидете до табът Settings => Detection and Protection => сложете отметка на "Scan for rootkits".
Отидете до табът Dashboard => натиснете бутона "SCAN NOW".
Програмата автоматично ще провери за актуализации и ще започне сканирането.
Забележка: Ако видите съобщението "Could not load DDA driver" натиснете бутона "YES". След което разрешете на системата да се рестартира.
След като проверката приключи натиснете бутона "Remove Selected".
Системата ще поиска рестарт, съгласете се.
След като системата зареди MBAB ще зареди.
Отидете до табът History => Applications Logs.
Потърсете лог с име "SCAN LOG" с последната дата и час и натиснете върху него.
Натиснете бутона EXPORT => Copy to Clipboard.
Поставете съдържанието на лога с клавишната комбинация CTRL+V към следващия Ви коментар.

5 януари 20179 г.

Автор

Fixlog.txt

Стъпка 1:

Деинсталирах SpyHunter

DriverToolkit вече беше деинсталиран, изтрих папките, които открих с това име в С драйва.

Стъпка 2:

линк: https://www.virustotal.com/en/file/61e103f350bcf2efafbdda4ea1f8e5b69f03967e7be157a4db772e85f201d103/analysis/1483638495/

Стъпка 3:

Прикачам Fixlog файла.

Стъпка 4:

# AdwCleaner v6.041 - Дневникът е създаден 05/01/2017 в 20:05:58
# Обновен на 16/12/2016 от Malwarebytes
# База данни : 2017-01-03.1 [Сървърна]
# Операционна Система : Windows 7 Ultimate Service Pack 1 (X64)
# Потребителско име : Ivan - IVAN-PC
# Изпълнява се от : C:\Users\Ivan\Desktop\adwcleaner_6.041.exe
# Режим: Сканиране
# Поддръжка :https://www.malwarebytes.com/support

***** [ Услуги ] *****

Открита е услуга: esgiguard

***** [ Папки ] *****

Открита е папка: C:\Users\Ivan\AppData\Roaming\imminent
Открита е папка: C:\Program Files (x86)\OLBPre
Открита е папка: C:\Program Files (x86)\Enigma Software Group

***** [ Файлове ] *****

Открит е файл: C:\Users\Ivan\Desktop\MyPC Backup.lnk
Открит е файл: C:\sh4_service.log
Открит е файл: C:\shldr.mbr
Открит е файл: C:\shldr

***** [ DLL ] *****

Зловредни DLL библиотеки не бяха намерени.

***** [ WMI ] *****

Зловредни ключове в регистъра не бяха намерени.

***** [ Преки пътища ] *****

Не бяха намерени инфектирани преки пътища.

***** [ Планирани Задачи ] *****

Не бяха намерени злонамерени планирани задачи.

***** [ Регистър ] *****

Открит е ключ: HKU\S-1-5-21-3399940750-3007407254-270903411-1000\Software\DriverToolkit
Открит е ключ: HKCU\Software\DriverToolkit
Открит е ключ: HKLM\SOFTWARE\EnigmaSoftwareGroup
Открит е ключ: [x64] HKCU\Software\DriverToolkit

***** [ Интернет браузъри ] *****

Зловредни настройки във всички Firefox базирани интернет браузъри не бяха намерени.
Зловредни настройки във всички Chrome базирани интернет браузъри не бяха намерени.

*************************

C:\AdwCleaner\AdwCleaner[S0].txt - [2240 Байта] - [05/01/2017 20:05:58]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2318 Байта] ##########

Fixlog.txt

Стъпка 5:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 7 Ultimate x64
Ran by Ivan (Administrator) on зҐвў 05.01.2017 Ј. at 20:15:29,75
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 12

Successfully deleted: C:\Users\Ivan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\884CIS7K (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ivan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8S0D6XCV (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ivan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FQMYI901 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ivan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NA3YV8P9 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ivan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S7G2DTZ2 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Ivan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VMJC6CTM (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\884CIS7K (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8S0D6XCV (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FQMYI901 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NA3YV8P9 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S7G2DTZ2 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VMJC6CTM (Temporary Internet Files Folder)

Registry: 1

Successfully deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_C76D497934B1A0EE0E3BF23C3F10F9A7 (Registry Value)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on зҐвў 05.01.2017 Ј. at 20:17:42,19
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Редактирано 5 януари 20179 г. от Ivan Mirchev Nikolov (преглед на промените)

5 януари 20179 г.

Автор

Стъпка 6:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 5.1.2017 г.
Scan Time: 20:22 ч.
Logfile:
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2017.01.05.06
Rootkit Database: v2016.11.20.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Ivan

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 278156
Time Elapsed: 10 min, 48 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 1
PUP.Optional.VulnerableDellSystemDetect, HKU\S-1-5-21-3399940750-3007407254-270903411-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|DellSystemDetect, C:\Users\Ivan\AppData\Local\Apps\2.0\H0L1C4KV.MN9\MDLB6C3Q.1KA\dell..tion_6d0a76327dca4869_0007.000b_df227eeaae3cac0d\DellSystemDetect.exe 4zZn5oeQk9WMM5ZBt7fsYA==, Quarantined, [ab9ffa7e9513ef4788c185f2fe05a759]

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 1
Backdoor.Agent.RND, C:\Windows\SysWOW64\fiwllc.exe, Quarantined, [cb7fdd9b15934beb758fa6bad130e719],

Physical Sectors: 0
(No malicious items detected)

(end)

5 януари 20179 г.

Изтеглете: Emsissoft Emergency Kit

Стартирайте файла и посочете къде да се разархивира програмата - например в (C:\EEK), натискайки бутона Extract.
Стартирайте файла Start Emsisoft Emergency Kit от десктопа за да стартирате програмата.
Натиснете бутона "Yes", когато бъдете подканени да обновите дефинициите на програмата.
След като обновяването на дефинициите приключи натиснете бутона "Scan".
Програмата ще Ви попита дали искате да включите засичането на Potentially Unwanted Applications, натиснете бутона "Yes".
Натиснете бутона "Custom Scan". Премахнете от списъка оставете само дял C:\.
Натиснете "Next" за да започне проверката.
Когато проверката приключи натиснете бутона "View Report".
Копирайте съдържанието на лог файла в следващия Ви коментар.

5 януари 20179 г.

Автор

Emsisoft Emergency Kit - Version 12.0
Last update: 5.1.2017 г. 20:55:18
User account: Ivan-PC\Ivan
Computer name: IVAN-PC
OS version: Windows 7x64 Service Pack 1

Scan settings:

Scan type: Custom Scan
Objects: Rootkits, Memory, Traces, C:\

Detect PUPs: On
Scan archives: On
ADS Scan: On
File extension filter: Off
Direct disk access: Off

Scan start: 5.1.2017 г. 20:57:36

Scanned 176488
Found 0

Scan end: 5.1.2017 г. 21:34:45
Scan time: 0:37:09

5 януари 20179 г.

Автор

Влизам в същите сайтове, в които изскачаха реклами без да съм пуснал адблокъра и не се появяват. Изглежда, че проблемът е решен.

Има ли други стъпки?

След известно време и малко браузване се появи това:

5 януари 20179 г.

Изтеглете: Delfix.

Стартирайте Delfix.exе.
По подразбиране трябва да има 2 отметки на "Remove disinfection tools" и "Purge system restore ". Ако липсват, ги сложете.
Натиснете бутона "Run".
Инструмента ще се самоизтрие след като приключи своята задача.
Изтрийте лог файла от Delfix.
Ако има останали програми, които сме използвали и не са се изтрили, ги изтрийте ръчно.

~~Ако нямате повече въпроси, ще маркирам темата като решена.~~

Цитат

Има ли други стъпки?

След известно време и малко браузване се появи това

Интересно..... Направете нови логове с FRST и ги прикачете към следващия ви коментар.

5 януари 20179 г.

Автор

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-01-2017
Ran by Ivan (administrator) on IVAN-PC (05-01-2017 22:42:18)
Running from C:\Users\Ivan\Desktop
Loaded Profiles: Ivan (Available Profiles: Ivan)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Български (България)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.6\ToolbarUpdater.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrodist.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-30] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-12-21] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3477640 2012-09-23] (Adobe Systems Inc.)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [240400 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [240400 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2180680 2017-01-05] ()
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [134784 2015-01-31] (Qualcomm®Atheros®)
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2016-11-29] (Disc Soft Ltd)
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\...\Run: [GoogleChromeAutoLaunch_C76D497934B1A0EE0E3BF23C3F10F9A7] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728 2016-12-08] (Google Inc.)
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\...\MountPoints2: {0f6103fe-c753-11e6-9def-4cbb583f2f74} - F:\Setup.exe /AutoRun
Startup: C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2016-12-25]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 93.115.85.211 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{FD087434-4936-470D-B886-585CC2F4DEB5}: [DhcpNameServer] 93.115.85.211 8.8.8.8 8.8.4.4

Internet Explorer:
==================
HKU\S-1-5-21-3399940750-3007407254-270903411-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-05-21] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2014-05-14] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-05-21] (Microsoft Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2016-10-31] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.3.6.255\AVG Web TuneUp.dll [2017-01-05] (AVG)
BHO-x32: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-21] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2014-05-14] (Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
Handler-x32: lbxfile - {56831180-F115-11d2-B6AA-00104B2B9943} - C:\Program Files (x86)\Libronix DLS\System\FileProt.dll [2006-12-28] (Libronix Corporation)
Handler-x32: lbxres - {24508F1B-9E94-40EE-9759-9AF5795ADF52} - C:\Program Files (x86)\Libronix DLS\System\ResProt.dll [2006-12-28] (Libronix Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-04-01] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2016-12-25] [not signed]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.6\\npsitesafety.dll [No File]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @mozilla.zeniko.ch/PDFlite_Browser_Plugin -> C:\Program Files (x86)\PDFlite\npPdfViewer.dll [2014-02-26] (Simon Bünzli)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-21] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-21] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2014-01-21] (Microsoft Corporation)

Chrome:
=======
CHR HomePage: Default -> hxxps://www.google.bg/webhp?hl=bg&sa=X&ved=0ahUKEwi_v4zfyp7PAhXBJcAKHU5qBtgQPAgD
CHR StartupUrls: Default -> "hxxps://www.google.bg/"
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default [2017-01-05]
CHR Extension: (Google Преводач) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2016-12-21]
CHR Extension: (Google Презентации) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-21]
CHR Extension: (Google Документи) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-21]
CHR Extension: (Dictanote - Speech to text) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aomjekmpappghadlogpigifkghlmebjk [2016-12-21]
CHR Extension: (Google Диск) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-21]
CHR Extension: (YouTube) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-21]
CHR Extension: (Send to Kindle for Google Chrome) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgdjpilhipecahhcilnafpblkieebhea [2016-12-21]
CHR Extension: (Fair AdBlocker App (by STANDS)) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcnofaichneijfbkdkghmhjjbepjmble [2016-12-21]
CHR Extension: (Google Календар) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2016-12-21]
CHR Extension: (Електронни таблици от Google) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-21]
CHR Extension: (Dnevnik.bg) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgpgbimpbapjogkgkgmdkcdimopnnljb [2016-12-21]
CHR Extension: (Google Документи офлайн) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-21]
CHR Extension: (AnyMeeting Screensharing Extension) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjlnkcjifijaeogmofjkladngkaaemec [2016-12-21]
CHR Extension: (VoiceNote II - Speech to text) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfknjgplnkgjihghcidajejfmldhibfm [2016-12-21]
CHR Extension: (Kindle Cloud Reader) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdipabjmbhpdkjaihfjoikhjjeneebd [2016-12-21]
CHR Extension: (Grammarly for Chrome) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2016-12-21]
CHR Extension: (Spell checker and Grammar checker by Ginger) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdfieneakcjfaiglcfcgkidlkmlijjnh [2016-12-21]
CHR Extension: (Google Hangouts) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2016-12-23]
CHR Extension: (Google Play) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2016-12-21]
CHR Extension: (Capital.bg) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lanbncpnnmafpfikemcimkiddbogfnki [2016-12-21]
CHR Extension: (Fair AdBlocker (by STANDS)) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh [2016-12-30]
CHR Extension: (Google Карти) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2016-12-21]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-12-21]
CHR Extension: (Evernote Web Clipper) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2016-12-21]
CHR Extension: (Gmail) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-21]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2012-09-23]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [323200 2015-01-31] (Windows (R) Win 7 DDK provider) [File not signed]
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [971160 2016-12-15] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5337600 2016-12-15] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1146128 2016-12-06] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [725976 2016-12-15] (AVG Technologies CZ, s.r.o.)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2016-11-29] (Disc Soft Ltd)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2016-11-25] () [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344184 2016-06-23] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 vToolbarUpdater40.3.6; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.6\ToolbarUpdater.exe [1349704 2017-01-05] (AVG Secure Search)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [980552 2017-01-05] ()
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe [81536 2014-05-13] (Atheros) [File not signed]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [312576 2016-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [267008 2016-10-05] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [298240 2016-11-30] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [254208 2016-09-26] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [299264 2016-07-27] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.)
R3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2015-01-31] (Qualcomm Atheros)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-12-21] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-12-21] (Disc Soft Ltd)
S3 ew_usbccgpfilter; C:\Windows\System32\DRIVERS\ew_usbccgpfilter.sys [18816 2016-11-25] (Huawei Technologies Co., Ltd.)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2016-11-25] (Huawei Technologies Co., Ltd.)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-30] (Intel Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
S3 RSPCIESTOR; system32\DRIVERS\RtsPStor.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-05 22:42 - 2017-01-05 22:43 - 00022313 _____ C:\Users\Ivan\Desktop\FRST.txt
2017-01-05 22:42 - 2017-01-05 22:42 - 00000000 ____D C:\FRST
2017-01-05 22:41 - 2017-01-05 22:41 - 02418176 _____ (Farbar) C:\Users\Ivan\Desktop\FRST64.exe
2017-01-05 22:32 - 2017-01-05 22:32 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2017-01-05 22:27 - 2017-01-05 22:35 - 00000000 ____D C:\Users\Ivan\AppData\Local\AVG Web TuneUp
2017-01-05 22:27 - 2017-01-05 22:27 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search
2017-01-05 22:26 - 2017-01-05 22:35 - 00000000 ____D C:\ProgramData\AVG Web TuneUp
2017-01-05 22:26 - 2017-01-05 22:26 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp
2017-01-05 22:24 - 2017-01-05 22:24 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\AVG
2017-01-05 22:24 - 2017-01-05 22:24 - 00000000 ____D C:\Program Files\Common Files\AV
2017-01-05 22:23 - 2017-01-05 22:23 - 00000000 ___HD C:\$AVG
2017-01-05 22:23 - 2017-01-05 22:23 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\TuneUp Software
2017-01-05 22:23 - 2017-01-05 22:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2017-01-05 22:22 - 2017-01-05 22:35 - 00000000 ____D C:\ProgramData\MFAData
2017-01-05 22:22 - 2017-01-05 22:22 - 00000000 ____D C:\Users\Ivan\AppData\Local\MFAData
2017-01-05 22:20 - 2017-01-05 22:20 - 00000984 _____ C:\Users\Public\Desktop\AVG.lnk
2017-01-05 22:20 - 2017-01-05 22:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2017-01-05 22:18 - 2017-01-05 22:22 - 00000000 ____D C:\Program Files (x86)\AVG
2017-01-05 22:18 - 2017-01-05 22:18 - 00003600 _____ C:\Windows\System32\Tasks\AVG EUpdate Task
2017-01-05 22:18 - 2017-01-05 22:18 - 00000000 ____D C:\Users\Ivan\AppData\Local\CEF
2017-01-05 22:17 - 2017-01-05 22:24 - 00000000 ____D C:\Users\Ivan\AppData\Local\Avg
2017-01-05 22:17 - 2017-01-05 22:23 - 00000000 ____D C:\ProgramData\Avg
2017-01-05 22:17 - 2017-01-05 22:22 - 00000000 ____D C:\Users\Ivan\AppData\Local\AvgSetupLog
2017-01-05 22:17 - 2017-01-05 22:17 - 03312896 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Ivan\Desktop\AVG_Protection_Free_1606.exe
2017-01-05 22:13 - 2017-01-05 22:15 - 00003192 _____ C:\DelFix.txt
2017-01-05 20:51 - 2017-01-05 22:16 - 00000000 ____D C:\EEK
2017-01-05 20:42 - 2017-01-05 20:46 - 279761224 _____ C:\Users\Ivan\Desktop\EmsisoftEmergencyKit.exe
2017-01-05 20:22 - 2017-01-05 22:38 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-05 20:21 - 2017-01-05 20:21 - 00001102 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2017-01-05 20:21 - 2017-01-05 20:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2017-01-05 20:21 - 2017-01-05 20:21 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-05 20:21 - 2017-01-05 20:21 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2017-01-05 20:21 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2017-01-05 20:21 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2017-01-05 20:21 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-05 20:20 - 2017-01-05 20:20 - 22851472 _____ (Malwarebytes ) C:\Users\Ivan\Desktop\mbam-setup-2.2.1.1043.exe
2017-01-05 19:36 - 2017-01-05 19:51 - 00000000 ____D C:\Users\Ivan\AppData\OICE_15_974FA576_32C1D314_3D6F
2017-01-05 17:42 - 2017-01-05 17:42 - 00002072 _____ C:\Users\Ivan\Desktop\scan_eset_online.txt
2017-01-05 16:12 - 2017-01-05 16:12 - 00000000 ____D C:\Program Files (x86)\ESET
2017-01-03 17:04 - 2017-01-03 16:27 - 00284050 ____T C:\Users\Ivan\Documents\Founding-Declaration.pdf
2017-01-03 16:25 - 2017-01-03 16:25 - 00029761 ____T C:\Users\Ivan\Documents\Deklaracia.pdf
2016-12-30 16:38 - 2016-12-30 16:38 - 00264046 _____ C:\Users\Ivan\Desktop\Gmail - Appointment Confirmation.pdf
2016-12-30 11:38 - 2016-12-30 11:38 - 00000000 ____D C:\Users\Ivan\AppData\Local\Diagnostics
2016-12-30 11:00 - 2016-12-30 11:00 - 00061416 _____ C:\Users\Ivan\Desktop\030007a1.jpg
2016-12-30 10:36 - 2016-12-30 10:36 - 00144433 _____ C:\Users\Ivan\Desktop\030007a6.jpg
2016-12-30 10:25 - 2016-12-30 10:25 - 00000991 _____ C:\Users\Public\Desktop\HiSuite.lnk
2016-12-30 10:25 - 2016-12-30 10:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HiSuite
2016-12-30 10:24 - 2016-12-30 10:25 - 00000000 ____D C:\Program Files (x86)\HiSuite
2016-12-30 10:24 - 2016-11-25 08:15 - 00287232 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_quusbnet.sys
2016-12-30 10:24 - 2016-11-25 08:15 - 00223232 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_quusbmdm.sys
2016-12-30 10:24 - 2016-11-25 08:15 - 00126592 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_cdcacm.sys
2016-12-30 10:24 - 2016-11-25 08:15 - 00116864 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_usbdev.sys
2016-12-30 10:24 - 2016-11-25 08:15 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys
2016-12-30 10:24 - 2016-11-25 08:15 - 00018816 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbccgpfilter.sys
2016-12-30 00:49 - 2016-12-30 00:49 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\PDFlite
2016-12-30 00:48 - 2016-12-30 00:48 - 00001859 _____ C:\Users\Public\Desktop\PDFlite.lnk
2016-12-30 00:48 - 2016-12-30 00:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFlite
2016-12-30 00:48 - 2013-08-26 14:12 - 00119152 _____ C:\Windows\system32\redmon.hlp
2016-12-30 00:48 - 2013-08-26 14:12 - 00087040 _____ C:\Windows\system32\redmonnt.dll
2016-12-30 00:48 - 2013-08-26 14:12 - 00046080 _____ C:\Windows\system32\unredmon.exe
2016-12-30 00:47 - 2016-12-30 00:48 - 00000000 ____D C:\Program Files (x86)\PDFlite
2016-12-29 17:33 - 2016-12-29 17:33 - 00001192 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Libronix Digital Library System.lnk
2016-12-29 17:33 - 2016-12-29 17:33 - 00001092 _____ C:\Users\Public\Desktop\Libronix Digital Library System.lnk
2016-12-29 17:02 - 2017-01-04 21:37 - 00000000 ____D C:\Users\Ivan\Documents\Libronix DLS
2016-12-29 16:30 - 2016-12-29 17:02 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Libronix DLS
2016-12-29 16:30 - 2016-12-29 16:30 - 00000000 ____D C:\ProgramData\Libronix DLS
2016-12-29 16:29 - 2016-12-29 17:28 - 00000000 ____D C:\Program Files (x86)\Libronix DLS
2016-12-25 15:21 - 2016-12-25 15:21 - 00000000 ____H C:\Users\Ivan\Documents\Default.rdp
2016-12-25 15:21 - 2016-12-25 15:21 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Macromedia
2016-12-25 15:21 - 2016-12-25 15:21 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\com.adobe.formscentral.FormsCentralForAcrobat
2016-12-25 11:44 - 2016-12-25 11:44 - 00002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat XI Pro.lnk
2016-12-25 11:44 - 2016-12-25 11:44 - 00002210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe FormsCentral.lnk
2016-12-25 11:44 - 2016-12-25 11:44 - 00002140 _____ C:\Users\Public\Desktop\Adobe FormsCentral.lnk
2016-12-25 11:44 - 2016-12-25 11:44 - 00002049 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller XI.lnk
2016-12-25 11:44 - 2016-12-25 11:44 - 00002026 _____ C:\Users\Public\Desktop\Adobe Acrobat XI Pro.lnk
2016-12-25 11:40 - 2017-01-05 19:33 - 00000000 ____D C:\Windows\system32\appmgmt
2016-12-25 11:26 - 2016-12-25 11:45 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-12-25 11:22 - 2016-12-27 17:54 - 00000000 ____D C:\Users\Ivan\AppData\Local\Adobe
2016-12-25 11:22 - 2016-12-25 15:21 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Adobe
2016-12-25 11:20 - 2016-12-25 11:43 - 00000000 ____D C:\ProgramData\Adobe
2016-12-25 11:20 - 2016-12-25 11:42 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-12-25 10:29 - 2016-12-27 17:36 - 00000000 ____D C:\Users\Ivan\Evernote
2016-12-25 10:29 - 2016-12-25 10:29 - 00000932 _____ C:\Users\Ivan\Desktop\Evernote.lnk
2016-12-25 10:29 - 2016-12-25 10:29 - 00000000 ____D C:\Users\Ivan\AppData\LocalLow\Evernote
2016-12-25 10:29 - 2016-12-25 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2016-12-25 10:29 - 2016-12-25 10:29 - 00000000 ____D C:\Program Files (x86)\Evernote
2016-12-24 18:36 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-12-24 18:36 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-12-24 18:36 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-12-24 18:36 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-12-24 18:36 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-12-24 18:36 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-12-24 18:36 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-12-24 18:36 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-12-24 18:36 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-12-24 18:36 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-12-24 18:35 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-12-24 18:35 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-12-24 18:35 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-12-24 18:35 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-12-24 18:33 - 2016-12-24 18:33 - 00001128 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player FREE.lnk
2016-12-24 18:33 - 2016-12-24 18:33 - 00001122 _____ C:\Users\Public\Desktop\BS.Player FREE.lnk
2016-12-24 18:33 - 2016-12-24 18:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BS.Player
2016-12-24 18:32 - 2016-12-25 22:40 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\BSplayer
2016-12-24 18:32 - 2016-12-24 18:32 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\BSplayer Pro
2016-12-24 18:32 - 2016-12-24 18:32 - 00000000 ____D C:\Program Files (x86)\Webteh
2016-12-24 16:19 - 2016-12-24 16:19 - 00002456 _____ C:\Users\Ivan\Documents\Register Vegas Pro.htm
2016-12-24 16:19 - 2016-12-24 16:19 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Publish Providers
2016-12-24 16:14 - 2016-12-24 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2016-12-24 16:13 - 2017-01-05 20:49 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{a5b3df42-c9e1-11e6-9c32-4cbb583f2f74}.TMContainer00000000000000000001.regtrans-ms
2016-12-24 16:13 - 2017-01-05 20:49 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{a5b3df42-c9e1-11e6-9c32-4cbb583f2f74}.TM.blf
2016-12-24 16:13 - 2016-12-24 16:23 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{a5b3df42-c9e1-11e6-9c32-4cbb583f2f74}.TMContainer00000000000000000002.regtrans-ms
2016-12-24 16:13 - 2016-12-24 16:17 - 00000000 ____D C:\Users\Ivan\AppData\Local\Sony
2016-12-24 16:13 - 2016-12-24 16:13 - 00000000 ____D C:\ProgramData\Sony
2016-12-24 16:13 - 2016-12-24 16:13 - 00000000 ____D C:\Program Files\Sony
2016-12-24 16:13 - 2016-12-24 16:13 - 00000000 ____D C:\Program Files (x86)\Sony
2016-12-24 16:11 - 2016-12-24 16:39 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Sony
2016-12-24 15:41 - 2016-12-24 15:41 - 00000000 ____D C:\Windows\SysWOW64\sda
2016-12-24 15:37 - 2016-12-24 15:37 - 01048576 ___SH C:\Windows\system32\config\COMPONENTS{016888b8-6c6f-11de-8d1d-001e0bcde3ec}.TxR.2.regtrans-ms
2016-12-24 15:37 - 2016-12-24 15:37 - 01048576 ___SH C:\Windows\system32\config\COMPONENTS{016888b8-6c6f-11de-8d1d-001e0bcde3ec}.TxR.1.regtrans-ms
2016-12-24 15:37 - 2016-12-24 15:37 - 01048576 ___SH C:\Windows\system32\config\COMPONENTS{016888b8-6c6f-11de-8d1d-001e0bcde3ec}.TxR.0.regtrans-ms
2016-12-24 15:37 - 2016-12-24 15:37 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{016888b8-6c6f-11de-8d1d-001e0bcde3ec}.TxR.blf
2016-12-24 15:37 - 2013-11-01 23:40 - 00330456 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsUVStor.sys
2016-12-24 15:37 - 2013-04-26 02:12 - 09889352 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsUVStoricon.dll
2016-12-24 15:15 - 2016-12-24 15:15 - 00000000 ____D C:\Users\Ivan\AppData\Local\Programs
2016-12-24 15:11 - 2016-12-24 15:37 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-12-24 15:11 - 2016-12-24 15:11 - 00000000 ____D C:\DRIVERS
2016-12-24 07:58 - 2017-01-01 18:59 - 00000000 ____D C:\Users\Ivan\AppData\Local\CrashDumps
2016-12-24 07:50 - 2016-12-24 07:50 - 00000000 ____D C:\Users\Ivan\Documents\Шаблони на Office по избор
2016-12-24 07:43 - 2016-12-24 07:43 - 00000000 ____D C:\Users\Ivan\AppData\Local\calibre-cache
2016-12-24 07:42 - 2016-12-25 11:16 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\calibre
2016-12-24 07:41 - 2016-12-24 07:41 - 00000960 _____ C:\Users\Public\Desktop\calibre - E-book management.lnk
2016-12-24 07:41 - 2016-12-24 07:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2016-12-24 07:41 - 2016-12-24 07:41 - 00000000 ____D C:\Program Files (x86)\Calibre2
2016-12-23 12:50 - 2016-12-23 12:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IP Camera Adapter
2016-12-23 12:50 - 2016-12-23 12:50 - 00000000 ____D C:\Program Files (x86)\IP Camera Adapter
2016-12-23 12:03 - 2016-12-23 12:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2016-12-23 12:03 - 2016-12-23 12:03 - 00000000 ____D C:\Users\Ivan\.android
2016-12-23 11:58 - 2016-12-23 11:58 - 00000000 ____D C:\Users\Ivan\Documents\HiSuite
2016-12-23 11:57 - 2016-12-30 10:25 - 00000000 ____D C:\Users\Ivan\AppData\Local\Hisuite
2016-12-23 11:57 - 2016-11-25 08:15 - 02152176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFUpdate_01009.dll
2016-12-23 11:57 - 2016-11-25 08:15 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01009.dll
2016-12-23 11:57 - 2016-11-25 08:15 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winusbcoinstaller2.dll
2016-12-23 11:55 - 2016-12-23 11:55 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2016-12-22 15:58 - 2016-12-22 15:58 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-12-22 14:34 - 2016-12-22 14:34 - 00001914 _____ C:\Users\Public\Desktop\BibleWorks 10.lnk
2016-12-22 14:34 - 2000-10-31 02:11 - 00098304 _____ (TechSmith Corporation) C:\Windows\SysWOW64\tsccvid.dll
2016-12-22 14:33 - 2016-12-22 14:33 - 00000000 ____D C:\Users\Ivan\Documents\BibleWorks
2016-12-22 14:33 - 2016-12-22 14:33 - 00000000 ____D C:\Users\Ivan\AppData\Local\BibleWorks
2016-12-22 14:33 - 2016-12-22 14:33 - 00000000 ____D C:\ProgramData\BibleWorks
2016-12-22 14:33 - 2015-11-16 17:42 - 02881024 _____ C:\Windows\SysWOW64\bwinstall.dll
2016-12-22 14:33 - 2015-09-16 14:35 - 00147456 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\HRS32.DLL
2016-12-22 14:33 - 2015-09-16 14:29 - 00614400 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\HTS18.DLL
2016-12-22 14:33 - 2015-09-15 14:23 - 01974272 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\TER23.DLL
2016-12-22 14:33 - 2015-03-22 15:44 - 22962688 _____ C:\Windows\SysWOW64\bwbits10.dll
2016-12-22 14:33 - 2015-02-17 16:30 - 00610304 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\HTS17.DLL
2016-12-22 14:33 - 2015-02-16 18:14 - 01937408 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\TER22.DLL
2016-12-22 14:33 - 2014-07-31 16:52 - 01843200 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\ter20.dll
2016-12-22 14:33 - 2014-07-31 16:52 - 00593920 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\hts15.dll
2016-12-22 14:33 - 2013-11-08 09:49 - 00647680 _____ C:\Windows\SysWOW64\sqlite3.dll
2016-12-22 14:33 - 2011-02-07 17:41 - 00304640 _____ (MicroQuill Software Publishing, Inc.) C:\Windows\SysWOW64\SHW32d.DLL
2016-12-22 14:33 - 2010-08-31 13:08 - 01560576 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\TER17.DLL
2016-12-22 14:33 - 2010-08-31 13:08 - 00577573 _____ (Sub Systems, Inc. ) C:\Windows\SysWOW64\HTS12.DLL
2016-12-22 14:33 - 2010-08-31 13:08 - 00267728 _____ (Wintertree Software Inc.) C:\Windows\SysWOW64\ssce5532.dll
2016-12-22 14:33 - 2009-04-20 03:00 - 00139264 _____ (Info-ZIP) C:\Windows\SysWOW64\unzip32.dll
2016-12-22 14:33 - 2007-01-25 03:03 - 00058280 _____ C:\Windows\SysWOW64\bwnthook.dll
2016-12-22 14:33 - 2007-01-25 03:02 - 00058280 _____ C:\Windows\SysWOW64\bwntsend.dll
2016-12-22 14:33 - 2005-08-06 08:45 - 00055808 _____ C:\Windows\SysWOW64\zlib1.dll
2016-12-22 14:33 - 2003-09-17 12:43 - 00081920 _____ C:\Windows\SysWOW64\bwplay.exe
2016-12-22 14:33 - 2000-03-14 05:21 - 00181760 _____ C:\Windows\SysWOW64\patchw32.dll
2016-12-22 14:33 - 1997-12-05 12:33 - 00116736 _____ C:\Windows\SysWOW64\patchw.dll
2016-12-22 14:22 - 2017-01-05 21:03 - 00000000 ____D C:\Program Files (x86)\BibleWorks 10
2016-12-22 14:22 - 2016-12-22 14:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BibleWorks 10
2016-12-22 09:39 - 2016-12-25 11:26 - 00000000 ____D C:\Users\Ivan\AppData\LocalLow\Adobe
2016-12-21 14:53 - 2016-12-21 14:53 - 03370683 _____ C:\Users\Ivan\Desktop\Topics.pdf
2016-12-21 11:50 - 2016-12-21 11:50 - 00000000 _____ C:\autoexec.bat
2016-12-21 10:14 - 2016-12-21 10:14 - 00003053 _____ C:\Users\Ivan\Desktop\SharpKeys.lnk
2016-12-21 10:14 - 2016-12-21 10:14 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RandyRants.com
2016-12-21 10:14 - 2016-12-21 10:14 - 00000000 ____D C:\Program Files (x86)\RandyRants.com
2016-12-21 10:13 - 2016-12-21 10:13 - 00486400 _____ C:\Users\Ivan\Downloads\Непотвърдено 701865.crdownload
2016-12-21 10:13 - 2016-12-21 10:13 - 00486400 _____ C:\Users\Ivan\Downloads\Непотвърдено 568051.crdownload
2016-12-21 10:12 - 2016-12-21 10:12 - 00486400 _____ C:\Users\Ivan\Downloads\Непотвърдено 131414.crdownload
2016-12-21 10:00 - 2016-12-21 10:00 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\WinRAR
2016-12-21 09:55 - 2016-12-21 09:55 - 00000000 _RSHD C:\Windows Activation Technologies
2016-12-21 09:54 - 2012-10-07 14:33 - 00001429 _____ C:\Users\Ivan\Desktop\KJ_Starter.lnk
2016-12-21 09:54 - 2012-10-07 14:33 - 00001429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KJ_Starter.lnk
2016-12-21 09:54 - 2012-10-06 00:07 - 00405881 _____ C:\Windows\KJ.exe
2016-12-21 09:53 - 2016-12-21 10:05 - 00000000 ____D C:\Windows\KJ
2016-12-21 09:51 - 2017-01-05 18:16 - 00000000 ____D C:\Downloads
2016-12-21 09:50 - 2017-01-05 19:51 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\BitComet
2016-12-21 09:50 - 2016-12-21 09:50 - 00000812 _____ C:\Users\Public\Desktop\BitComet.lnk
2016-12-21 09:50 - 2016-12-21 09:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)
2016-12-21 09:50 - 2016-12-21 09:50 - 00000000 ____D C:\Program Files\BitComet
2016-12-21 09:49 - 2016-12-21 09:49 - 16316000 _____ C:\Users\Ivan\Downloads\BitComet_1.44_setup (1).exe
2016-12-21 09:48 - 2016-12-21 09:48 - 16316000 _____ C:\Users\Ivan\Downloads\BitComet_1.44_setup.exe
2016-12-21 09:27 - 2016-12-21 09:27 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-12-21 09:26 - 2016-12-21 11:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-12-21 09:26 - 2016-12-21 09:26 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-12-21 09:25 - 2017-01-05 22:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\Windows\PCHEALTH
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files\Microsoft.NET
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2016-12-21 09:25 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2016-12-21 09:23 - 2016-12-21 11:36 - 00000000 ____D C:\ProgramData\Microsoft Help
2016-12-21 09:23 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files\Microsoft Office
2016-12-21 09:23 - 2016-12-21 09:23 - 00000000 ____D C:\Users\Ivan\AppData\Local\Microsoft Help
2016-12-21 09:23 - 2016-12-21 09:23 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2016-12-21 09:23 - 2016-12-21 09:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-12-21 09:23 - 2016-12-21 09:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2016-12-21 09:22 - 2016-12-21 09:22 - 00000000 __RHD C:\MSOCache
2016-12-21 09:21 - 2016-12-21 09:21 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-12-21 09:21 - 2016-12-21 09:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-12-21 09:21 - 2016-12-21 09:21 - 00000000 ____D C:\Program Files (x86)\WinRAR
2016-12-21 09:20 - 2016-12-21 09:20 - 01972424 _____ C:\Users\Ivan\Downloads\wrar540.exe
2016-12-21 09:17 - 2016-12-21 09:17 - 00000000 ____D C:\Users\Ivan\AppData\Local\Disc_Soft_Ltd
2016-12-21 09:15 - 2016-12-21 09:15 - 00000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2016-12-21 09:13 - 2016-12-21 09:18 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\DAEMON Tools Lite
2016-12-21 09:13 - 2016-12-21 09:14 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2016-12-21 09:13 - 2016-12-21 09:13 - 00047672 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtliteusbbus.sys
2016-12-21 09:13 - 2016-12-21 09:13 - 00030264 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2016-12-21 09:13 - 2016-12-21 09:13 - 00001773 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2016-12-21 09:13 - 2016-12-21 09:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2016-12-21 09:13 - 2016-12-21 09:13 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2016-12-21 08:45 - 2016-12-21 09:25 - 00000000 ____D C:\Program Files (x86)\Microsoft.NET
2016-12-21 08:43 - 2016-12-21 08:43 - 00692072 _____ (Disc Soft Ltd.) C:\Users\Ivan\Downloads\DTLiteInstaller.exe
2016-12-21 08:28 - 2016-12-21 08:28 - 00000118 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-12-21 08:27 - 2017-01-05 22:32 - 00000000 __SHD C:\Users\Ivan\IntelGraphicsProfiles
2016-12-21 08:27 - 2016-12-21 08:27 - 00015778 _____ C:\Windows\system32\results.xml
2016-12-21 08:26 - 2016-12-21 08:26 - 00000401 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-12-21 08:24 - 2016-12-21 08:24 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2016-12-21 08:24 - 2013-12-21 00:38 - 00041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll
2016-12-21 08:24 - 2013-12-10 15:27 - 00016344 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll
2016-12-21 08:23 - 2016-12-21 08:23 - 00000000 ____H C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
2016-12-21 08:23 - 2016-12-21 08:23 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2016-12-21 08:23 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2016-12-21 08:23 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2016-12-21 08:23 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2016-12-21 08:23 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2016-12-21 08:22 - 2016-12-21 08:46 - 00751640 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-12-21 08:22 - 2016-12-21 08:24 - 00000000 ____D C:\ProgramData\Intel
2016-12-21 08:22 - 2016-12-21 08:22 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-12-21 08:22 - 2016-12-21 08:22 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Intel Corporation
2016-12-21 08:21 - 2016-12-21 08:24 - 00000000 ____D C:\Program Files\Intel
2016-12-21 08:21 - 2016-12-21 08:24 - 00000000 ____D C:\Program Files (x86)\Intel
2016-12-21 08:21 - 2016-12-21 08:21 - 00000700 _____ C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk
2016-12-21 08:21 - 2016-06-23 08:53 - 00095232 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL
2016-12-21 08:21 - 2016-06-23 08:53 - 00091128 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2016-12-21 08:20 - 2016-12-21 08:27 - 00000000 ____D C:\Intel
2016-12-21 08:18 - 2016-12-21 08:18 - 00000000 ____D C:\Users\Ivan\Documents\Dell Downloads
2016-12-21 08:17 - 2016-12-21 08:17 - 00013560 _____ C:\Users\Ivan\Downloads\DellSystemDetectLauncher.Application
2016-12-21 08:17 - 2016-12-21 08:17 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
2016-12-21 08:15 - 2016-12-21 08:15 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Приложения в Chrome
2016-12-21 08:14 - 2016-12-21 08:14 - 00002265 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-21 08:14 - 2016-12-21 08:14 - 00002253 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-21 08:13 - 2016-12-30 00:48 - 00142672 _____ C:\Users\Ivan\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-21 08:13 - 2016-12-23 12:07 - 00000000 ____D C:\Users\Ivan\AppData\Local\Deployment
2016-12-21 08:13 - 2016-12-21 08:22 - 00000000 ____D C:\Users\Ivan\AppData\Local\Google
2016-12-21 08:13 - 2016-12-21 08:20 - 00003430 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-21 08:13 - 2016-12-21 08:20 - 00003302 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-21 08:13 - 2016-12-21 08:14 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-21 08:13 - 2016-12-21 08:13 - 00000000 ____D C:\Users\Ivan\AppData\Local\Apps\2.0
2016-12-21 08:13 - 2016-12-21 08:13 - 00000000 ____D C:\Users\Ivan\AppData\Local\Apps
2016-12-21 08:11 - 2016-12-21 08:12 - 00000000 ____D C:\Users\Ivan\AppData\LocalLow\Microsoft
2016-12-21 08:11 - 2016-12-21 08:11 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Atheros
2016-12-21 08:11 - 2016-12-21 08:11 - 00000000 ____D C:\Users\Ivan\AppData\Local\BMExplorer
2016-12-21 08:11 - 2016-12-21 08:11 - 00000000 ____D C:\ProgramData\Atheros
2016-12-21 08:10 - 2016-12-21 08:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HotSpot
2016-12-21 08:10 - 2016-12-21 08:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atheros Smart Net
2016-12-21 08:09 - 2016-12-21 08:09 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_btath_hcrp_01009.Wdf
2016-12-21 08:08 - 2016-12-28 16:35 - 00000000 ____D C:\Users\Ivan\Documents\Bluetooth Folder
2016-12-21 08:07 - 2016-12-21 08:08 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program
2016-12-21 08:07 - 2016-12-21 08:08 - 00000000 ____D C:\Program Files\Common Files\QCA_Bluetooth
2016-12-21 08:06 - 2017-01-05 22:24 - 00000000 __SHD C:\Windows\Installer
2016-12-21 08:06 - 2016-12-24 15:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-21 08:06 - 2016-12-21 08:10 - 00000000 ____D C:\Program Files (x86)\Dell Wireless
2016-12-21 08:06 - 2016-12-21 08:06 - 00000000 ____D C:\Windows\system32\nn-NO
2016-12-21 08:06 - 2016-12-21 08:06 - 00000000 ____D C:\Windows\Options
2016-12-21 08:06 - 2016-12-21 08:06 - 00000000 ____D C:\Program Files (x86)\Cisco
2016-12-21 08:06 - 2015-02-02 00:21 - 00031345 ____N C:\Windows\system32\netathrx.inf
2016-12-21 08:06 - 2015-02-02 00:21 - 00027074 ____N C:\Windows\system32\athwbx.inf
2016-12-21 08:06 - 2015-02-02 00:21 - 00011400 ____N C:\Windows\system32\athwbx.cat
2016-12-21 08:06 - 2015-02-02 00:21 - 00009662 ____N C:\Windows\system32\athrextx.cat
2016-12-21 08:06 - 2015-01-11 19:19 - 04134912 ____N (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\athrx.sys
2016-12-21 08:06 - 2015-01-11 19:19 - 04134912 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys
2016-12-21 08:06 - 2015-01-11 19:07 - 04267008 ____N (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\athwbx.sys
2016-12-21 08:06 - 2014-05-13 20:07 - 00060416 ____N (Atheros) C:\Windows\system32\athihvui.dll
2016-12-21 08:06 - 2014-05-13 20:06 - 00440320 ____N (Atheros) C:\Windows\system32\athihvs.dll
2016-12-21 08:05 - 2016-12-21 08:06 - 00000000 ____D C:\ProgramData\Dell
2016-12-21 08:03 - 2017-01-05 22:42 - 01835008 ___SH C:\Users\Ivan\NTUSER.DAT
2016-12-21 08:03 - 2017-01-05 22:42 - 00262144 ___SH C:\Users\Ivan\ntuser.dat.LOG1
2016-12-21 08:03 - 2017-01-05 22:42 - 00000000 ___RD C:\Users\Ivan\Desktop
2016-12-21 08:03 - 2017-01-05 22:41 - 00000000 ___RD C:\Users\Ivan\Downloads
2016-12-21 08:03 - 2017-01-05 22:32 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-21 08:03 - 2017-01-05 22:27 - 00000000 ____D C:\Users\Ivan\AppData\Local
2016-12-21 08:03 - 2017-01-05 22:24 - 00000000 ____D C:\Users\Ivan\AppData\Roaming
2016-12-21 08:03 - 2017-01-05 19:36 - 00000000 ___HD C:\Users\Ivan\AppData
2016-12-21 08:03 - 2017-01-03 17:04 - 00000000 ___RD C:\Users\Ivan\Documents
2016-12-21 08:03 - 2017-01-02 13:02 - 00000000 ___SD C:\Users\Ivan\AppData\Roaming\Microsoft
2016-12-21 08:03 - 2016-12-30 11:37 - 00000000 ____D C:\Users\Ivan\AppData\Local\Microsoft
2016-12-21 08:03 - 2016-12-30 01:21 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2016-12-21 08:03 - 2016-12-25 10:29 - 00000000 ____D C:\Users\Ivan\AppData\LocalLow
2016-12-21 08:03 - 2016-12-25 10:29 - 00000000 ____D C:\Users\Ivan
2016-12-21 08:03 - 2016-12-21 08:10 - 00524288 ___SH C:\Users\Ivan\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
2016-12-21 08:03 - 2016-12-21 08:10 - 00524288 ___SH C:\Users\Ivan\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
2016-12-21 08:03 - 2016-12-21 08:10 - 00065536 ___SH C:\Users\Ivan\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
2016-12-21 08:03 - 2016-12-21 08:03 - 00001427 _____ C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-12-21 08:03 - 2016-12-21 08:03 - 00001393 _____ C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-12-21 08:03 - 2016-12-21 08:03 - 00000476 ___SH C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000402 ___SH C:\Users\Ivan\Documents\desktop.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000282 ___SH C:\Users\Ivan\Downloads\desktop.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000282 ___SH C:\Users\Ivan\Desktop\desktop.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000174 ___SH C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000020 ___SH C:\Users\Ivan\ntuser.ini
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 __SHD C:\Recovery
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___SH C:\Users\Ivan\ntuser.dat.LOG2
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Videos
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Searches
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Saved Games
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Pictures
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Music
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Links
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Favorites
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\Contacts
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Identities
2016-12-21 08:03 - 2016-12-21 08:03 - 00000000 ____D C:\Users\Ivan\AppData\Local\VirtualStore
2016-12-21 08:03 - 2011-04-12 10:34 - 00000000 ____D C:\Users\Ivan\AppData\Roaming\Media Center Programs
2016-12-21 08:03 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-21 08:03 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-21 08:01 - 2016-12-21 08:01 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-12-21 08:00 - 2017-01-05 22:41 - 00492758 _____ C:\Windows\WindowsUpdate.log
2016-12-21 08:00 - 2016-12-24 15:25 - 00000000 ____D C:\Windows\SoftwareDistribution
2016-12-21 08:00 - 2016-12-21 08:00 - 00001355 _____ C:\Windows\TSSysprep.log
2016-12-21 08:00 - 2016-12-21 08:00 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-12-21 07:59 - 2016-12-21 07:59 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-12-21 07:58 - 2016-12-21 14:55 - 00000000 ____D C:\Windows\Prefetch
2016-12-21 07:57 - 2017-01-05 22:30 - 4194332672 ___SH C:\pagefile.sys
2016-12-21 07:57 - 2017-01-05 22:23 - 00000000 __SHD C:\System Volume Information
2016-12-21 07:57 - 2016-12-21 08:03 - 00000000 ____D C:\Windows\Panther

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-05 22:37 - 2009-07-14 07:13 - 00787118 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-05 22:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-01-05 22:30 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-05 22:29 - 2009-07-14 06:45 - 00025936 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-05 22:29 - 2009-07-14 06:45 - 00025936 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-05 20:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\security
2016-12-30 21:31 - 2009-07-14 06:45 - 00507696 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-30 11:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-12-30 10:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\DriverStore
2016-12-30 10:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\catroot
2016-12-30 01:04 - 2009-07-14 05:20 - 00000000 ___RD C:\Program Files
2016-12-29 16:32 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Fonts
2016-12-27 17:54 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2016-12-27 17:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\bg-BG
2016-12-27 17:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\bg-BG
2016-12-24 16:14 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\assembly
2016-12-24 16:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Microsoft.NET
2016-12-24 15:36 - 2009-07-14 06:54 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{016888b9-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
2016-12-24 15:36 - 2009-07-14 06:54 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{016888b9-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
2016-12-24 15:08 - 2009-07-14 05:20 - 00000000 ___SD C:\ProgramData\Microsoft
2016-12-23 11:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Drivers\UMDF
2016-12-21 10:03 - 2011-04-12 10:34 - 00000000 ____D C:\Windows\ShellNew
2016-12-21 10:03 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2016-12-21 09:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-12-21 09:26 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-12-21 09:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\Tasks\Microsoft
2016-12-21 09:24 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2016-12-21 09:15 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Public\Documents
2016-12-21 08:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\en-US
2016-12-21 08:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\en-US
2016-12-21 08:25 - 2011-04-12 10:24 - 00000000 ____D C:\Windows\system32\Drivers\en-US
2016-12-21 08:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\wbem
2016-12-21 08:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Logs
2016-12-21 08:22 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2016-12-21 08:21 - 2009-07-14 06:54 - 00000404 ___SH C:\Users\Public\Desktop\desktop.ini
2016-12-21 08:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\LogFiles
2016-12-21 08:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\CodeIntegrity
2016-12-21 08:08 - 2009-07-14 05:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-TW
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-CN
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sv-SE
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ru-RU
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\pt-PT
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\pl-PL
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\nl-NL
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ko-KR
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ja-JP
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\it-IT
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\hu-HU
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\fr-FR
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\fi-FI
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\es-ES
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\el-GR
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\de-DE
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\da-DK
2016-12-21 08:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\cs-CZ
2016-12-21 08:03 - 2009-07-14 05:20 - 00000000 ___RD C:\Users
2016-12-21 08:03 - 2009-07-14 05:18 - 00000000 __SHD C:\$Recycle.Bin
2016-12-21 08:02 - 2009-07-14 06:45 - 00000000 ____D C:\Windows\debug
2016-12-21 08:01 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-12-21 08:01 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-21 08:01 - 2009-07-14 07:01 - 00281759 _____ C:\Windows\SysWOW64\license.rtf
2016-12-21 08:01 - 2009-07-14 07:01 - 00281759 _____ C:\Windows\system32\license.rtf
2016-12-21 08:01 - 2009-07-14 06:54 - 00000964 ___SH C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-21 08:00 - 2009-07-14 06:46 - 00002790 _____ C:\Windows\DtcInstall.log
2016-12-21 08:00 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2016-12-21 07:58 - 2011-04-12 10:34 - 00000000 ____D C:\Windows\CSC
2016-12-21 07:57 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2016-12-21 07:57 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-12-21 07:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\config\RegBack
2016-12-21 07:57 - 2009-07-14 04:34 - 00189440 ____H C:\Users\Default\NTUSER.DAT.LOG1
2016-12-21 07:56 - 2009-07-14 04:34 - 00262144 ___SH C:\Users\Default\NTUSER.DAT

Some files in TEMP:
====================
C:\Users\Ivan\AppData\Local\Temp\libeay32.dll
C:\Users\Ivan\AppData\Local\Temp\msvcr120.dll
C:\Users\Ivan\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe
[2010-11-21 05:24] - [2011-01-16 02:01] - 0389632 ____A (Microsoft Corporation) 81257415084B84F3C0D95C381A8D4C8F

C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll
[2010-11-21 05:24] - [2011-01-16 02:01] - 1008640 ____A (Microsoft Corporation) 0B864E15A0BADFF0E7BB8B59009FDDCF

C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-12-21 07:57

==================== End of FRST.txt ============================

Addition.txt

5 януари 20179 г.

Ще прегледам логовете утре.

5 януари 20179 г.

Проблема само в Google Chrome ли се появява?

6 януари 20179 г.

Автор

Сега инсталирам firefox. Дадох му да импортне от хрома отметки и т.н., може би не трябваше. В предишните случаи проблемът се появяваше при всички браузъри. Интернет експлоръра в момента се държи странно - не може да зареди страницата, или зарежда отново и отново и после дава това на картинката.

При firefox-а започнаха да се появяват ето такива реклами. И постоянно зареждане на страниците:

Редактирано 6 януари 20179 г. от Ivan Mirchev Nikolov (преглед на промените)

6 януари 20179 г.

Експортирайте си отметките от браузърите, заедно с паролите. Следващата стъпка ще върне браузърите към първоначалните им настройки и ще изгубите, история на сърфиране, настройки, отметки, пароли, добавки към браузъра и др.

Изтеглете ZOEK и го запишете на вашия работен плот.

Щракнете с десния бутон върху тази икона и изберете Run as Administrator, за да стартирате инструмента.
Изчакайте търпеливо, докато се появи главната конзола (може да отнеме минута или две).

В главния прозорец, моля поставете следния скрипт:

Цитат

IEDefaults;

chrdefaults;

FFDefaults;
autoclean;
emptyalltemp;

Уверете се, че опцията Scan All Users е маркирана.
Натиснете Run Script и изчакайте. Сканирането може да отнеме няколко минути.
Когато сканирането приключи, ще се отвори лог файл с име zoek-results.
Ако е необходимо рестартиране, той ще се отвори след това.
Копирайте съдържанието му в следващия си коментар..

6 януари 20179 г.

Автор

Zoek.exe v5.0.0.1 Updated 19-September-2016
Tool run by Ivan on ЇҐв 06.01.2017 Ј. at 12:19:47,97.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Ivan\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

6.1.2017 г. 12:21:28 Zoek.exe System Restore Point Created Successfully.

==== Empty Folders Check ======================

C:\Users\Ivan\AppData\Roaming\Publish Providers deleted successfully
C:\Users\Ivan\AppData\Local\calibre-cache deleted successfully
C:\Users\Ivan\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WtuSystemSupport deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WtuSystemSupport deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater40.3.6 deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vToolbarUpdater40.3.6 deleted successfully

==== FireFox Fix ======================

Deleted from C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\prefs.js:

Added to C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\Users\Ivan\AppData\Roaming\calibre deleted
C:\Users\Ivan\.android deleted
C:\PROGRA~3\AVG Web TuneUp deleted
"C:\PROGRA~2\AVG Web TuneUp\vprot.exe" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller\40.3.6\avgdttbx.dll" deleted
"C:\Users\Ivan\AppData\Local\AVG Web TuneUp" deleted
"C:\PROGRA~2\AVG Web TuneUp" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search" deleted
"C:\Users\Ivan\AppData\Local\AVG Web TuneUp\Chrome" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller\40.3.6" deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\64fq43q7.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"[email protected]"="C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn" [25.12.2016 Ј. 11:43]

6 януари 20179 г.

Има ли промяна сега?

Прикачете лога zoek-results към следващия ви коментар.

6 януари 20179 г.

Автор

Няма промяна. Това, което се случва е, че при отварянето на всеки файл (уърдов например), или страница от браузъра, ме праща автоматично най-долу. Иначе рекламите продължават да си изскачат. Не виждам да са изчистени настройките, отметките и паролите на браузърите.

6 януари 20179 г.

Не са изчистени, защото лога е непълен, затова поисках да прикачиш лога вместо да го копираш.

6 януари 20179 г.

Автор

Съжалявам, не съм разбрал. Пускам отново.

6 януари 20179 г.

Не предприемайте мерки, за които не сте инструктирани!

6 януари 20179 г.

Автор

Ок. Изчаквам.

6 януари 20179 г.

Автор

zoek-results.log

6 януари 20179 г.

Лога е непълен, изчакахте ли програмата да си свърши работата или я затворихте?

6 януари 20179 г.

Автор

Затворих я като смятах, че работата е приключила, тъй като видях генерирания файл. Явно съм сбъркал.

Добре дошли!

Упорит адуеър или някаква друга зараза

Featured Replies

Архивирана тема

Разглеждащи това в момента 0

Дарение

Бюлетин

Профил

Навигация

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)